CVE-2017-8422
Fixed in a distro release EPSS 2%
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | kauth | 5.33.0-2 |
| Debian 12 | kauth | 5.28.0-2 |
| Debian 13 | kauth | 5.28.0-2 |
| Debian 14 | kauth | 5.28.0-2 |
| Debian 7 | kde4libs | 4:4.8.4-4+deb7u3 |
| Debian 8 | kde4libs | 4:4.14.2-5+deb8u2 |
| Red Hat Enterprise Linux 7 | kdelibs | 6:4.14.8-6.el7_3 |
| Red Hat Enterprise Linux 7 | kdelibs-apidocs | 6:4.14.8-6.el7_3 |
| Red Hat Enterprise Linux 7 | kdelibs-common | 6:4.14.8-6.el7_3 |
| Red Hat Enterprise Linux 7 | kdelibs-debuginfo | 6:4.14.8-6.el7_3 |
| Red Hat Enterprise Linux 7 | kdelibs-devel | 6:4.14.8-6.el7_3 |
| Red Hat Enterprise Linux 7 | kdelibs-ktexteditor | 6:4.14.8-6.el7_3 |
| SUSE Linux Enterprise Desktop 12 SP1 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Server 12 SP1 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Server 12 SP2 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kdelibs4 | 4.12.0-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kdelibs4 | 4.12.0-10.1 |
| SUSE Package Hub 12 SP1 | kauth | 5.26.0-6.1 |
| SUSE Package Hub 12 SP1 | kdelibs4 | 4.14.25-8.2 |
| SUSE Package Hub 12 SP1 | kdelibs4-apidocs | 4.14.25-8.2 |
| SUSE Package Hub 12 SP2 | kauth | 5.26.0-6.1 |
| SUSE Package Hub 12 SP2 | kdelibs4 | 4.14.25-8.2 |
| SUSE Package Hub 12 SP2 | kdelibs4-apidocs | 4.14.25-8.2 |
| Ubuntu 14.04 LTS | kde4libs | 4:4.13.3-0ubuntu0.5 |
| Ubuntu 16.04 LTS | kauth | 5.18.0-0ubuntu2 |
| Ubuntu 16.04 LTS | kde4libs | 4:4.14.16-0ubuntu3.2 |