Описание
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | kdelibs | Not affected | ||
| Red Hat Enterprise Linux 6 | kdelibs | Not affected | ||
| Red Hat Enterprise Linux 6 | kdelibs3 | Not affected | ||
| Red Hat Enterprise Linux 6 | kdelibs-experimental | Not affected | ||
| Red Hat Enterprise Linux 7 | kdelibs-experimental | Not affected | ||
| Red Hat Enterprise Linux 7 | kdelibs | Fixed | RHSA-2017:1264 | 22.05.2017 |
Показывать по
Дополнительная информация
Статус:
7.8 High
CVSS3
Связанные уязвимости
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to ...
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
7.8 High
CVSS3