CVE-2022-23853

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
kdekate
𝑥
< 21.12.2
kdektexteditor
𝑥
< 5.91.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
kate
bookworm
4:22.12.3-1
fixed
bullseye
no-dsa
buster
no-dsa
sid
4:23.08.1-1
fixed
stretch
no-dsa
trixie
4:23.08.1-1
fixed
ktexteditor
bookworm
5.103.0-1.1
fixed
bullseye
no-dsa
buster
no-dsa
sid
5.115.0-3
fixed
stretch
no-dsa
trixie
5.115.0-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kate
bionic
needs-triage
focal
needs-triage
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
ignored
xenial
needs-triage
ktexteditor
bionic
needs-triage
focal
needs-triage
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
ignored
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libQt5Concurrent-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Concurrent5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Core-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Core-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Core5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5DBus-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5DBus-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5DBus5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Gui-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Gui-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Gui5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5KmsSupport-devel-static
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5KmsSupport-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Network-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Network-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Network5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5OpenGL-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5OpenGL-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5OpenGL5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5OpenGLExtensions-devel-static
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PlatformHeaders-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PlatformSupport-devel-static
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PlatformSupport-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PrintSupport-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PrintSupport-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5PrintSupport5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql5-mysql
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql5-postgresql
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql5-sqlite
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Sql5-unixODBC
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Test-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Test-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Test5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Widgets-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Widgets-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Widgets5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Xml-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libQt5Xml5
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libqt5-qtbase-common-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libqt5-qtbase-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libqt5-qtbase-platformtheme-gtk3
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
libqt5-qtbase-private-headers-devel
suse enterprise desktop 15 SP3
5.12.7-4.17.1
fixed
suse enterprise sap 15 SP3
5.12.7-4.17.1
fixed
suse enterprise server 15 SP2
5.12.7-4.17.1
fixed
suse enterprise server 15 SP3
5.12.7-4.17.1
fixed
Common Weakness Enumeration
References
https://apps.kde.org/kate/
https://kde.org/info/security/advisory-20220131-1.txt
https://security.gentoo.org/glsa/202401-21
https://apps.kde.org/kate/
https://kde.org/info/security/advisory-20220131-1.txt
https://security.gentoo.org/glsa/202401-21