KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 17, 2017 |
| Centos_linux | — | Upgrade kdelibsUpgrade kdelibs-debuginfoUpgrade kdelibs-commonUpgrade kdelibs-apidocsUpgrade kdelibs-develUpgrade kdelibs-ktexteditor | May 24, 2017 | May 10, 2017 |
| Debian | — | Upgrade kauthUpgrade kde4libs | May 12, 2017 | May 10, 2017 |
| Freebsd | — | Upgrade kf5-kauthUpgrade kdelibs | May 10, 2017 | May 10, 2017 |
| Gentoo Linux | — | Upgrade kde-frameworks/kdelibs.Upgrade kde-frameworks/kauth. | Oct 30, 2017 | May 17, 2017 |
| Oracle_linux | — | Upgrade kdelibsUpgrade kdelibs-commonUpgrade kdelibs-apidocsUpgrade kdelibs-ktexteditorUpgrade kdelibs-devel | May 22, 2017 | May 10, 2017 |
| Redhat_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibs-commonUpgrade kdelibs-debuginfoUpgrade kdelibs-ktexteditorUpgrade kdelibsUpgrade kdelibs-devel | May 23, 2017 | May 10, 2017 |
| Suse | — | Upgrade kauth-develUpgrade libkdecore4-develUpgrade libkde4Upgrade libkdecore4-32bitUpgrade libKF5Auth5Upgrade libksuseinstall1Upgrade kdelibs4-branding-upstreamUpgrade libKF5Auth5-langUpgrade libksuseinstall-develUpgrade libkdecore4Upgrade libkde4-develUpgrade kdelibs4-coreUpgrade libksuseinstall1-32bitUpgrade kdelibs4-docUpgrade kdelibs4Upgrade kdelibs4-apidocsUpgrade libkde4-32bit | May 15, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade kdelibs5-plugins | May 15, 2017 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub