ALT-PU-2018-2638

Высокий

ALT-PU-2018-2638: package kde5-kio-extras update to version 18.04.3-alt2

Источник

errata.altlinux.org

Дата публикации

13.11.2018

Дата обновления

13.11.2018

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades kde5-kio-extras to version 18.04.3-alt2.

Устраненные уязвимости1

CVE-2018-19120

Высокий 7.5

Дата публикации: 29.11.2018

CWE-200

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address. * #33502: Не изменяются права файлов в Samba шаре

CVSS 3.0

Высокий 7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2018-19120 https://nvd.nist.gov/vuln/detail/CVE-2018-19120

Ссылки1

ALT-PU-2018-2638 https://errata.altlinux.org/ALT-PU-2018-2638

Связанные уязвимости

CVE-2018-19120

CVSS3: 7.5

ubuntu

почти 8 лет назад

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.

CVE-2018-19120

CVSS3: 7.5

nvd

почти 8 лет назад

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.

CVE-2018-19120

CVSS3: 7.5

debian

почти 8 лет назад

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows ...

GHSA-39rp-qwx2-562v

CVSS3: 7.5

github

больше 4 лет назад

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.