The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kde4libsUpgrade kio | May 12, 2017 | Mar 2, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2017 |
| Suse | — | Upgrade kdelibs4-branding-upstreamUpgrade libkdecore4Upgrade kio-develUpgrade libksuseinstall-develUpgrade kdelibs4-apidocsUpgrade kio-coreUpgrade kdelibs4Upgrade kdelibs4-docUpgrade kioUpgrade kio-langUpgrade libkdecore4-develUpgrade libkde4Upgrade libksuseinstall1Upgrade kdelibs4-coreUpgrade libkde4-devel | Mar 14, 2017 | Mar 2, 2017 |
| Ubuntu | — | Upgrade kdelibs5-plugins | Mar 10, 2017 | Mar 2, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub