An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kde-settings-plasmaUpgrade khotkeysUpgrade kde-workspace-develUpgrade kde-workspace-ksplash-themesUpgrade kdelibs-debuginfoUpgrade ksysguarddUpgrade oxygen-cursor-themesUpgrade kde-workspaceUpgrade kde-workspace-debuginfoUpgrade kdelibs-ktexteditorUpgrade kde-settings-minimalUpgrade khotkeys-libsUpgrade virtuoso-opensource-debuginfoUpgrade kwin-libsUpgrade plasma-scriptengine-rubyUpgrade kmagUpgrade kde-settings-pulseaudioUpgrade ksysguardUpgrade kinfocenterUpgrade kdelibs-develUpgrade kwinUpgrade virtuoso-opensource-utilsUpgrade qt-settingsUpgrade kmag-debuginfoUpgrade virtuoso-opensourceUpgrade kdelibs-commonUpgrade kdelibsUpgrade kgreeter-pluginsUpgrade kde-style-oxygenUpgrade kdelibs-apidocsUpgrade kdeclassic-cursor-themeUpgrade plasma-scriptengine-pythonUpgrade kmenueditUpgrade kcm_colorsUpgrade kde-settingsUpgrade kde-workspace-libsUpgrade libkworkspaceUpgrade ksysguard-libsUpgrade kwin-gles-libsUpgrade kde-settings-ksplashUpgrade kwin-gles | Aug 28, 2019 | Feb 7, 2018 |
| Debian | — | Upgrade plasma-workspace | Jul 30, 2024 | Feb 7, 2018 |
| Gentoo Linux | — | Upgrade kde-plasma/plasma-workspace. | Mar 19, 2018 | Feb 6, 2018 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade ksysguardUpgrade kdelibs-develUpgrade kde-workspaceUpgrade kinfocenterUpgrade kde-workspace-develUpgrade kdelibs-ktexteditorUpgrade kde-workspace-ksplash-themesUpgrade kwin-libsUpgrade oxygen-cursor-themesUpgrade kmagUpgrade kde-settings-plasmaUpgrade plasma-scriptengine-rubyUpgrade ksysguarddUpgrade khotkeysUpgrade kde-settings-pulseaudioUpgrade kde-settings-minimalUpgrade kwin-gles-libsUpgrade kde-style-oxygenUpgrade khotkeys-libsUpgrade kcm_colorsUpgrade libkworkspaceUpgrade kde-settings-ksplashUpgrade kdelibsUpgrade virtuoso-opensource-utilsUpgrade kwinUpgrade plasma-scriptengine-pythonUpgrade kde-settingsUpgrade kde-workspace-libsUpgrade kdeclassic-cursor-themeUpgrade kwin-glesUpgrade kgreeter-pluginsUpgrade kdelibs-commonUpgrade kmenueditUpgrade qt-settingsUpgrade virtuoso-opensourceUpgrade ksysguard-libs | Jul 21, 2020 | Feb 8, 2018 |
| Redhat_linux | — | Upgrade kwin-libsUpgrade kmagUpgrade ksysguardUpgrade kde-settings-minimalUpgrade kwinUpgrade kde-settingsUpgrade oxygen-cursor-themesUpgrade plasma-scriptengine-rubyUpgrade kgreeter-pluginsUpgrade ksysguarddUpgrade kde-workspace-debuginfoUpgrade virtuoso-opensourceUpgrade khotkeys-libsUpgrade kcm_colorsUpgrade kde-workspace-libsUpgrade libkworkspaceUpgrade virtuoso-opensource-utilsUpgrade kdelibs-apidocsUpgrade kdelibsUpgrade kde-settings-ksplashUpgrade kdeclassic-cursor-themeUpgrade kde-workspace-develUpgrade kde-style-oxygenUpgrade khotkeysUpgrade kde-settings-pulseaudioUpgrade virtuoso-opensource-debuginfoUpgrade kde-workspaceUpgrade kdelibs-commonUpgrade plasma-scriptengine-pythonUpgrade qt-settingsUpgrade kde-settings-plasmaUpgrade ksysguard-libsUpgrade kdelibs-ktexteditorUpgrade kmag-debuginfoUpgrade kdelibs-develUpgrade kde-workspace-ksplash-themesUpgrade kwin-gles-libsUpgrade kmenueditUpgrade kinfocenterUpgrade kwin-glesUpgrade kdelibs-debuginfo | Aug 7, 2019 | Feb 7, 2018 |
| Suse | — | Upgrade drkonqi5Upgrade plasma5-workspaceUpgrade plasma5-workspace-develUpgrade plasma5-workspace-libsUpgrade plasma5-workspace-lang | Feb 9, 2018 | Feb 6, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub