Описание
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| kio-extras | fixed | 4:18.08.3-1 | package | |
| kio-extras | no-dsa | stretch | package | |
| kde-runtime | removed | package | ||
| kde-runtime | ignored | buster | package | |
| kde-runtime | no-dsa | stretch | package | |
| kde-runtime | ignored | jessie | package |
Примечания
https://www.kde.org/info/security/advisory-20181012-1.txt
EPSS
Связанные уязвимости
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
ALT-PU-2018-2638: package `kde5-kio-extras` update to version 18.04.3-alt2
EPSS