The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade kde-workspace | Dec 10, 2025 | Nov 17, 2014 |
| Gentoo Linux | — | Upgrade kde-base/systemsettings. | Oct 30, 2017 | Dec 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 4, 2014 |
| Suse | — | Upgrade kwinUpgrade kdmUpgrade plasma5-desktopUpgrade plasma5-desktop-langUpgrade kdebase4-workspace-ksysguarddUpgrade kde4-kgreeter-pluginsUpgrade kdebase4-workspace-develUpgrade kdebase4-wallpapersUpgrade kdebase4-workspace | Feb 2, 2016 | Dec 6, 2014 |
| Ubuntu | — | Upgrade kde-workspace-bin | Nov 8, 2024 | Dec 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub