Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-7443 →
DEBIAN-CVE-2019-7443
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain type...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
kauth
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]
Debian:13
kauth
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]
Debian:14
kauth
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54.0-2"}]}]
Références
- advisory security-tracker.debian.org