CVE-2017-6410

概要

参考情報

• debian.org/security/2017/dsa-3849
• securityfocus.com/bid/96515
• kde.org/info/security/advisory-20170228-1.txt · Patch

kdelibs のその他の脆弱性

• CVE-2015-7543高 7.0aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-…
• CVE-2017-8422高 7.8KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privilege…
• CVE-2014-5033中 6.9KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users…
• CVE-2014-3494中 4.3kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, whic…
• CVE-2013-2074中 5.0kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an …