Description
Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kdelibs +1 | 6:3.3.1-3.6 | RHSA-2005:325 |
| RHEL 3 | kdelibs +1 | 6:3.1.3-6.10 | RHSA-2005:307 |
Advisories 2
- RHSA-2005:325 Red Hat Security Advisory: kdelibs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:307 Red Hat Security Advisory: kdelibs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://www.kde.org/info/security/advisory-20050316-1.txt
- FLSA:178606 vendor-advisory
- MDKSA-2005:058 vendor-advisory
- 12820 vdb-entry
- RHSA-2005:325 vendor-advisory
- RHSA-2005:307 vendor-advisory
- oval:org.mitre.oval:def:10432 vdb-entry signature
- GLSA-200503-22 vendor-advisory
- 20050316 Multiple KDE Security Advisories (2005-03-16) mailing-list