CVE-2014-3494
Fixed in a distro release EPSS <1%
kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 14.04 LTS | kde4libs | 4:4.13.1-0ubuntu0.2 |
| openSUSE Tumbleweed | kdelibs4 | 4.14.27-1.1 |