KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade polkit-qt-docUpgrade polkit-qtUpgrade polkit-qt-devel | Dec 1, 2016 | Aug 19, 2014 |
| Freebsd | — | Upgrade kdelibs | Dec 10, 2025 | Jul 31, 2014 |
| Oracle_linux | — | Upgrade polkit-qt-docUpgrade polkit-qt-develUpgrade polkit-qt | Oct 16, 2024 | Aug 19, 2014 |
| Suse | — | Upgrade libkdecore4-develUpgrade libkdecore4-devel-debuginfoUpgrade kdm-debuginfoUpgrade kde4-kgreeter-plugins-debuginfoUpgrade kdm-branding-upstreamUpgrade libksuseinstall1Upgrade python-kdebase4Upgrade libkdecore4-32bitUpgrade libkde4-develUpgrade libkde4-debuginfo-32bitUpgrade kdebase4-workspace-debuginfoUpgrade kdebase4-workspace-liboxygenstyle-debuginfo-32bitUpgrade kdelibs4-apidocsUpgrade libkdecore4-debuginfo-32bitUpgrade kde4-kgreeter-pluginsUpgrade kdebase4-workspaceUpgrade libksuseinstall1-32bitUpgrade krandrUpgrade kdelibs4-branding-upstreamUpgrade kdebase4-workspace-liboxygenstyle-32bitUpgrade kdebase4-workspace-develUpgrade kdebase4-workspace-liboxygenstyle-debuginfoUpgrade kdebase4-workspace-debugsourceUpgrade krandr-debuginfoUpgrade kdelibs4-debugsourceUpgrade libksuseinstall1-debuginfoUpgrade kdelibs4-docUpgrade libkde4-debuginfoUpgrade kdebase4-workspace-devel-debuginfoUpgrade kdebase4-workspace-ksysguarddUpgrade kdelibs4-debuginfoUpgrade libkde4-32bitUpgrade libksuseinstall1-debuginfo-32bitUpgrade libkde4Upgrade kdebase4-workspace-branding-upstreamUpgrade kdelibs4-doc-debuginfoUpgrade libkdecore4Upgrade kwin-debuginfoUpgrade kdelibs4-core-debuginfoUpgrade kdebase4-workspace-plasma-calendar-debuginfoUpgrade kdebase4-workspace-ksysguardd-debuginfoUpgrade kdelibs4Upgrade kdmUpgrade kdebase4-workspace-plasma-calendarUpgrade libksuseinstall-develUpgrade kdelibs4-coreUpgrade kwinUpgrade kdebase4-workspace-liboxygenstyleUpgrade libkdecore4-debuginfo | Dec 18, 2015 | Aug 11, 2014 |
| Ubuntu | — | Upgrade kdelibs5-plugins | Nov 8, 2024 | Aug 19, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub