CVE-2017-8422

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
kdekauth
𝑥
≤ 5.33
kdekdelibs
𝑥
≤ 4.14.31
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
kauth
bookworm
5.103.0-1
fixed
bullseye
5.78.0-2
fixed
sid
5.115.0-2
fixed
trixie
5.115.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kauth
trusty
dne
xenial
Fixed 5.18.0-0ubuntu2
released
yakkety
Fixed 5.26.0-0ubuntu2.1
released
zesty
Fixed 5.31.0-0ubuntu1.1
released
kde4libs
trusty
Fixed 4:4.13.3-0ubuntu0.5
released
xenial
Fixed 4:4.14.16-0ubuntu3.2
released
yakkety
Fixed 4:4.14.22-0ubuntu2.2
released
zesty
Fixed 4:4.14.30-0ubuntu1.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libkde4
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
libkde4-32bit
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
libkdecore4
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
libkdecore4-32bit
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
libksuseinstall1
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
libksuseinstall1-32bit
suse enterprise sap 12 SP1
4.12.0-10.1
fixed
suse enterprise sap 12 SP2
4.12.0-10.1
fixed
suse enterprise sap 12 SP5
4.12.0-10.1
fixed
suse enterprise server 12 SP1
4.12.0-10.1
fixed
suse enterprise server 12 SP2
4.12.0-10.1
fixed
suse enterprise server 12 SP3
4.12.0-10.1
fixed
suse enterprise server 12 SP4
4.12.0-10.1
fixed
suse enterprise server 12 SP5
4.12.0-10.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kdelibs
RHEL 7
6:4.14.8-6.el7_3
fixed
kdelibs-apidocs
RHEL 7
6:4.14.8-6.el7_3
fixed
kdelibs-common
RHEL 7
6:4.14.8-6.el7_3
fixed
kdelibs-devel
RHEL 7
6:4.14.8-6.el7_3
fixed
kdelibs-ktexteditor
RHEL 7
6:4.14.8-6.el7_3
fixed