KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade kdelibs | Dec 10, 2025 | Aug 12, 2004 |
| Suse | — | Upgrade kdebase3Upgrade kdelibs3Upgrade kdebase3-64bitUpgrade arts-32bitUpgrade artsUpgrade kdebase3-develUpgrade kdelibs3-64bitUpgrade kdelibs3-32bitUpgrade kdelibs3-x86Upgrade kdebase3-x86Upgrade kdebase3-32bitUpgrade kdelibs3-develUpgrade arts-x86Upgrade arts-64bit | Dec 12, 2013 | Sep 28, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub