PT-2014-8657

CVE-2014-8651

·

Published

2014-11-07

·

Updated

2016-12-07

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions kde-workspace versions prior to 4.11.14 plasma-desktop versions prior to 5.1.1
Description The issue allows local users to gain privileges via a crafted ntpUtility argument in the KDE Clock KCM policykit helper.
Recommendations For kde-workspace versions prior to 4.11.14, update to version 4.11.14 or later. For plasma-desktop versions prior to 5.1.1, update to version 5.1.1 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2014-8651
MGASA-2014-0445
MGASA-2014-0480
SUSE-SU-2016:0303-1
SUSE-SU-2016_0303-1
USN-2402-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com