kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade kde-runtime | Dec 10, 2025 | Jan 14, 2015 |
| Gentoo Linux | — | Upgrade kde-apps/kwalletd. | Oct 30, 2017 | Jan 18, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 24, 2013 |
| Suse | — | Upgrade kde4-l10n-ltUpgrade kde4-l10n-plUpgrade kde4-l10n-ndsUpgrade kde4-l10n-arUpgrade kdebase4-runtime-xineUpgrade sle-sdk-releaseUpgrade kde4-l10n-ru-docUpgrade kde4-l10n-mkUpgrade kde4-l10n-itUpgrade kde4-l10n-huUpgrade kde4-l10n-sv-docUpgrade kde4-l10n-deUpgrade kde4-l10n-da-dataUpgrade kde4-l10n-thUpgrade kde4-l10n-roUpgrade kde4-l10n-frUpgrade kde4-l10n-elUpgrade kdebase4-runtimeUpgrade kde4-l10n-da-docUpgrade kde4-l10n-mlUpgrade kde4-l10n-es-dataUpgrade kde4-l10n-kuUpgrade kde4-l10n-pt_BR-docUpgrade kde4-l10n-kmUpgrade kde4-l10n-csUpgrade kde4-l10n-caUpgrade kde4-l10n-nl-dataUpgrade kde4-l10n-it-docUpgrade kde4-l10n-pl-dataUpgrade kde4-l10n-glUpgrade kde4-l10n-fiUpgrade kde4-l10n-paUpgrade kde4-l10n-ukUpgrade kde4-l10n-svUpgrade kde4-l10n-jaUpgrade kde4-l10n-daUpgrade kde4-l10n-zh_CNUpgrade kde4-l10n-lvUpgrade kde4-l10n-isUpgrade kde4-l10n-gaUpgrade kde4-l10n-nbUpgrade kde4-l10n-nlUpgrade kde4-l10n-en_GBUpgrade kde4-l10n-nl-docUpgrade kde4-l10n-es-docUpgrade kde4-l10n-ruUpgrade kde4-l10n-zh_TWUpgrade kde4-l10n-pl-docUpgrade kde4-l10n-fr-dataUpgrade kde4-l10n-de-docUpgrade kde4-l10n-slUpgrade kde4-l10n-fr-docUpgrade kde4-l10n-waUpgrade kde4-l10n-hiUpgrade kde4-l10n-de-dataUpgrade kde4-l10n-koUpgrade kde4-l10n-it-dataUpgrade kde4-l10n-etUpgrade kde4-l10n-csbUpgrade kde4-l10n-pt_BRUpgrade kde4-l10n-nnUpgrade kde4-l10n-trUpgrade kde4-l10n-ru-dataUpgrade kde4-l10n-pt_BR-dataUpgrade kde4-l10n-bgUpgrade kde4-l10n-esUpgrade kde4-l10n-ptUpgrade kde4-l10n-kkUpgrade kde4-l10n-sv-dataUpgrade kde4-l10n-eu | Jun 4, 2015 | Jan 18, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub