CVE-2014-8651

EUVD-2014-8487
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
Affected Products (NVD)
VendorProductVersion
kdeplasma-desktop
𝑥
≤ 5.1
kdekde-workspace
𝑥
≤ 4.11.13
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kde-workspace
lucid
dne
precise
Fixed 4:4.8.5-0ubuntu0.4
released
trusty
Fixed 4:4.11.11-0ubuntu0.2
released
utopic
Fixed 4:4.8.5-0ubuntu0.4
released
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.html
http://www.openwall.com/lists/oss-security/2014/11/04/9
http://www.openwall.com/lists/oss-security/2014/11/07/3
http://www.securityfocus.com/bid/70904
http://www.ubuntu.com/usn/USN-2402-1
https://security.gentoo.org/glsa/201512-12
https://www.kde.org/info/security/advisory-20141106-1.txt
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.html
http://www.openwall.com/lists/oss-security/2014/11/04/9
http://www.openwall.com/lists/oss-security/2014/11/07/3
http://www.securityfocus.com/bid/70904
http://www.ubuntu.com/usn/USN-2402-1
https://security.gentoo.org/glsa/201512-12
https://www.kde.org/info/security/advisory-20141106-1.txt