Описание
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4:26.08.0-0ubuntu1 |
| esm-apps-legacy/xenial | released | 4:15.12.3-0ubuntu1+esm1 |
| esm-apps/bionic | released | 4:17.12.3-1ubuntu1+esm1 |
| esm-apps/focal | released | 4:19.12.3-0ubuntu1+esm1 |
| esm-apps/jammy | released | 4:21.12.3-0ubuntu1+esm1 |
| esm-apps/noble | released | 4:23.08.5-0ubuntu4+esm1 |
| esm-apps/resolute | not-affected | 4:25.12.3-0ubuntu1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| jammy | needed | |
| noble | needed |
Показывать по
Ссылки на источники
EPSS
8.2 High
CVSS3
Связанные уязвимости
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
KDE Konsole before 25.04.2 allows remote code execution in a certain s ...
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
EPSS
8.2 High
CVSS3