CVE-2019-7443
Fixed in a distro release EPSS 2%
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability.
Products: kde kauth, opensuse leap, opensuse backports, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | kauth | 5.54.0-2 |
| Debian 13 | kauth | 5.54.0-2 |
| Debian 14 | kauth | 5.54.0-2 |
| SUSE Package Hub 12 SP1 | extra-cmake-modules | 5.32.0-7.2 |
| SUSE Package Hub 12 SP1 | kauth | 5.45.0-bp150.5.2 |
| SUSE Package Hub 12 SP1 | kcoreaddons | 5.45.0-bp150.3.6.2 |
| SUSE Package Hub 12 SP1 | polkit-qt5-1 | 0.112.0-5.2 |
| SUSE Package Hub 12 SP2 | extra-cmake-modules | 5.32.0-7.2 |
| SUSE Package Hub 12 SP2 | kauth | 5.45.0-bp150.5.2 |
| SUSE Package Hub 12 SP2 | kcoreaddons | 5.45.0-bp150.3.6.2 |
| SUSE Package Hub 12 SP2 | polkit-qt5-1 | 0.112.0-5.2 |
| SUSE Package Hub 12 SP3 | extra-cmake-modules | 5.32.0-7.2 |
| SUSE Package Hub 12 SP3 | kauth | 5.45.0-bp150.5.2 |
| SUSE Package Hub 12 SP3 | kcoreaddons | 5.45.0-bp150.3.6.2 |
| SUSE Package Hub 12 SP3 | polkit-qt5-1 | 0.112.0-5.2 |
| SUSE Package Hub 15 | extra-cmake-modules | 5.32.0-7.2 |
| SUSE Package Hub 15 | kauth | 5.45.0-bp150.8.2 |
| SUSE Package Hub 15 | kauth | 5.45.0-bp150.5.2 |
| SUSE Package Hub 15 | kauth | 5.45.0-bp150.3.6.1 |
| SUSE Package Hub 15 | kauth | 5.32.0-bp150.3.10.1 |
| SUSE Package Hub 15 | kcoreaddons | 5.45.0-bp150.3.6.2 |
| SUSE Package Hub 15 | kcoreaddons | 5.32.0-bp150.3.3.1 |
| SUSE Package Hub 15 | polkit-qt5-1 | 0.112.0-bp150.3.3.1 |
| SUSE Package Hub 15 | polkit-qt5-1 | 0.112.0-5.2 |
| SUSE Package Hub 15 | polkit-qt5-1 | 0.112.0-bp150.3.6.1 |
| Ubuntu Pro 16.04 LTS | kauth | 5.18.0-0ubuntu2+esm1 |
| Ubuntu Pro 18.04 LTS | kauth | 5.44.0-0ubuntu1+esm1 |
| openSUSE Leap 15.0 | extra-cmake-modules | 5.32.0-7.2 |
| openSUSE Leap 15.0 | kauth | 5.45.0-bp150.5.2 |
| openSUSE Leap 15.0 | kcoreaddons | 5.45.0-bp150.3.6.2 |
| openSUSE Leap 15.0 | polkit-qt5-1 | 0.112.0-5.2 |