The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibs-apidocsUpgrade kdelibs | Dec 1, 2016 | Nov 29, 2011 |
| Freebsd | — | Upgrade rekonqUpgrade kdelibs | Dec 10, 2025 | Oct 23, 2011 |
| Gentoo Linux | — | Upgrade gnome-base/gdm.Upgrade kde-base/kdelibs.Upgrade media-sound/lastfmplayer.Upgrade net-misc/mrouted.Upgrade media-libs/xine-lib.Upgrade net-misc/vino.Upgrade x11-apps/xrdb.Upgrade media-libs/fmod.Upgrade dev-libs/xmlsec.Upgrade dev-php/PEAR-PEAR.Upgrade games-sports/racer-bin.Upgrade app-admin/syslog-ng.Upgrade app-misc/ca-certificates.Upgrade net-libs/webkit-gtk.Upgrade sys-cluster/resource-agents.Upgrade sys-fs/lvm2.Upgrade net-analyzer/sflowtool.Upgrade dev-vcs/gitolite.Upgrade sys-apps/shadow.Upgrade net-misc/rsync.Upgrade dev-util/oprofile.Upgrade net-libs/libsoup.Upgrade dev-util/qt-creator.Upgrade app-office/gnucash.Upgrade dev-php/PEAR-Mail.Upgrade dev-db/unixODBC. | Oct 30, 2017 | Nov 29, 2011 |
| Oracle_linux | — | Upgrade kdelibsUpgrade kdelibs-apidocsUpgrade kdelibs-commonUpgrade kdelibs-develUpgrade kdelibs3Upgrade kdelibs3-apidocsUpgrade kdelibs3-devel | Oct 16, 2024 | Nov 29, 2011 |
| Suse | — | Upgrade libksuseinstall1Upgrade kdelibs4-coreUpgrade libkdecore4-32bitUpgrade libkde4-develUpgrade kdelibs4-docUpgrade libkdecore4-develUpgrade libkde4Upgrade libkdecore4Upgrade libksuseinstall-develUpgrade libkde4-32bitUpgrade kdelibs4-branding-upstreamUpgrade kdelibs4Upgrade libksuseinstall1-32bit | Dec 12, 2013 | Nov 29, 2011 |
| Ubuntu | — | Upgrade libkio5Upgrade kdelibs5 | Nov 8, 2024 | Nov 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub