Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2017-6410     Itzik Kotler, Yonatan Fridburg and Amit Klein of     Safebreach Labs reported that URLs are not sanitized     before passing them to FindProxyForURL, potentially     allowing a remote attacker to obtain sensitive     information via a crafted PAC file.

  - CVE-2017-8422     Sebastian Krahmer from SUSE discovered that the KAuth     framework contains a logic flaw in which the service     invoking dbus is not properly checked. This flaw allows     spoofing the identity of the caller and gaining root     privileges from an unprivileged account.

security fix for CVE-2017-8422.
https://www.kde.org/info/security/advisory-20170510-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New kdelibs packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

An update for kdelibs is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Desktop Environment.

Security Fix(es) :

* A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application. (CVE-2017-8422)

Red Hat would like to thank Sebastian Krahmer (SUSE) for reporting this issue.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
100163	Debian DSA-3849-1 : kde4libs - security update	Nessus	Debian Local Security Checks	2017/5/15	2025/12/18	high
100191	Fedora 24 : kf5-kauth (2017-6bdbf57f29)	Nessus	Fedora Local Security Checks	2017/5/16	2025/12/18	high
100224	Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : kdelibs (SSA:2017-136-02)	Nessus	Slackware Local Security Checks	2017/5/17	2025/12/18	high
100328	CentOS 7 : kdelibs (CESA-2017:1264)	Nessus	CentOS Local Security Checks	2017/5/23	2021/1/4	high
101567	Fedora 26 : kf5-kauth (2017-0898c704a1)	Nessus	Fedora Local Security Checks	2017/7/17	2025/12/10	high
100193	Fedora 25 : kf5-kauth (2017-7e3437b905)	Nessus	Fedora Local Security Checks	2017/5/16	2025/12/18	high
100197	Fedora 25 : 6:kdelibs (2017-aff6f6bd9d)	Nessus	Fedora Local Security Checks	2017/5/16	2025/12/18	high
100345	RHEL 7 : kdelibs (RHSA-2017:1264)	Nessus	Red Hat Local Security Checks	2017/5/23	2025/12/18	high
101735	Fedora 26 : 6:kdelibs (2017-dd51077c87)	Nessus	Fedora Local Security Checks	2017/7/17	2025/12/10	high

检测

插件搜索

high

high

high

high

high

high

high

high

high