SB2018020720 - Multiple vulnerabilities in KDE plasma-workspace 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018020720

SB2018020720 - Multiple vulnerabilities in KDE plasma-workspace

Published: February 7, 2018 Updated: August 8, 2020

Security Bulletin ID SB2018020720
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2018-6790)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.


2) OS Command Injection (CVE-ID: CVE-2018-6791)

The vulnerability allows a local non-authenticated attacker to execute arbitrary code.

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is "$(touch b)" -- this will create a file called b in the home folder.


Remediation

Install update from vendor's website.

References