PT-2020-16655
CVE-2020-27187
·
تاريخ النشر
2020-10-26
·
تاريخ التحديث
2022-04-28
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
KDE Partition Manager versions 4.1.0 through 4.1.x
Description
A logic flaw exists in the kpmcore externalcommand helper of KDE Partition Manager, where the service invoking D-Bus is not properly checked. This allows an attacker on the local machine to replace /etc/fstab and execute mount and other partitioning related commands while KDE Partition Manager is running, potentially leading to the gain of full root privileges.
Recommendations
For versions 4.1.0 through 4.1.x, update to version 4.2.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾