CVE-2017-8422
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
CVE-2017-8422- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-290
- Updated
- 2026-11-02
CVE List No score
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
CVE-2017-8422- Updated
- 2026-11-02
EUVDEUVD-2017-17373 No score
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
EUVD-2017-17373- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3x3g-jj7x-gr2f
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
GHSA-3x3g-jj7x-gr2f- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-290
- Updated
- 2026-11-02
OSV
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
CVE-2017-8422- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-8422
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
DEBIAN-CVE-2017-8422- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVRHSA-2017:1264
Red Hat Security Advisory: kdelibs security update
- Record
RHSA-2017:1264- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-8422
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
- Record
UBUNTU-CVE-2017-8422- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0274 No score
Updated kauth and kdelibs4 packages fix security vulnerability
Sebastian Krahmer from SUSE discovered that the KAuth framework contains a logic flaw in which the service invoking dbus is not properly checked. This flaw allows spoofing the identity of the caller and gaining root privileges from an unprivileged account (CVE-2017-8422).
- Record
MGASA-2017-0274- Updated
- 2026-11-02
OSVopenSUSE-SU-2017:1254-1 No score
Security update for kauth, kdelibs4
This update for kauth and kdelibs4 fixes the following issues:
- CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244).
- Record
openSUSE-SU-2017:1254-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2017:1272-1 No score
Security update for kauth, kdelibs4
This update for kauth and kdelibs4 fixes the following issues:
- CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244).
- Record
openSUSE-SU-2017:1272-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10887-1 No score
kauth-devel-5.86.0-1.2 on GA media
These are all security issues fixed in the kauth-devel-5.86.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10887-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:1335-1 No score
Security update for kdelibs4
This update for kdelibs4 fixes the following issues:
- CVE-2017-8422: This update fixes problem in the DBUS authentication of the kauth framework that could be used to escalate privileges depending on bugs or misimplemented dbus services. (boo#1036244)
- Record
SUSE-SU-2017:1335-1- Updated
- 2026-11-02
OSVUSN-3286-1 No score
kde4libs vulnerability
Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges.
- Record
USN-3286-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kauthDebian:12 |
before 5.28.0-2 | 5.28.0-2 |
kauthDebian:13 |
before 5.28.0-2 | 5.28.0-2 |
kauthDebian:14 |
before 5.28.0-2 | 5.28.0-2 |
kde4libsDebian:7 |
before 4:4.8.4-4+deb7u3, plus listed versions 4:4.8.4-44:4.8.4-4+deb7u14:4.8.4-4+deb7u2 |
4:4.8.4-4+deb7u3 |
kde4libsDebian:8 |
before 4:4.14.2-5+deb8u2, plus listed versions 4:4.14.2-54:4.14.2-5+deb8u1 |
4:4.14.2-5+deb8u2 |
kauthMageia:5 |
before 5.5.0-1.1.mga5 | 5.5.0-1.1.mga5 |
kdelibs4Mageia:5 |
before 4.14.30-1.1.mga5 | 4.14.30-1.1.mga5 |
kdelibsRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-commonRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdelibs-ktexteditorRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-apidocsRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-develRed Hat:enterprise_linux:7::client |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibsRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-commonRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-apidocsRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-develRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibsRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-commonRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-develRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-apidocsRed Hat:enterprise_linux:7::server |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibsRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-commonRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-develRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs-apidocsRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-6.el7_3 | 6:4.14.8-6.el7_3 |
kdelibs4SUSE:Linux Enterprise Desktop 12 SP1 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Desktop 12 SP2 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Server 12 SP1 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Server 12 SP2 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kdelibs4SUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 4.12.0-10.1 | 4.12.0-10.1 |
kde4libsUbuntu:14.04:LTS |
before 4:4.13.3-0ubuntu0.5, plus listed versions 4:4.11.2-0ubuntu24:4.11.2-0ubuntu34:4.11.2-0ubuntu44:4.11.80-0ubuntu14:4.11.95-0ubuntu1 Show 20 moreShow less4:4.11.97-0ubuntu14:4.11.97-0ubuntu24:4.12.0-0ubuntu14:4.12.1-0ubuntu14:4.12.2-0ubuntu14:4.12.2-0ubuntu24:4.12.3-0ubuntu14:4.12.90-0ubuntu14:4.12.95-0ubuntu14:4.12.97-0ubuntu14:4.13.0-0ubuntu14:4.13.0-0ubuntu1.14:4.13.1-0ubuntu0.14:4.13.1-0ubuntu0.24:4.13.2a-0ubuntu0.24:4.13.2a-0ubuntu0.34:4.13.3-0ubuntu0.14:4.13.3-0ubuntu0.24:4.13.3-0ubuntu0.34:4.13.3-0ubuntu0.4 |
4:4.13.3-0ubuntu0.5 |
kauthUbuntu:16.04:LTS |
before 5.18.0-0ubuntu2, plus listed versions 5.15.0-0ubuntu15.15.0-0ubuntu25.18.0-0ubuntu1 |
5.18.0-0ubuntu2 |
kde4libsUbuntu:16.04:LTS |
before 4:4.14.16-0ubuntu3.2, plus listed versions 4:4.14.13-0ubuntu14:4.14.13-0ubuntu24:4.14.13-0ubuntu34:4.14.13-0ubuntu44:4.14.13-0ubuntu64:4.14.16-0ubuntu14:4.14.16-0ubuntu34:4.14.16-0ubuntu3.1 |
4:4.14.16-0ubuntu3.2 |
kauthSUSE:Package Hub 12 SP1 |
before 5.26.0-6.1 | 5.26.0-6.1 |
kdelibs4SUSE:Package Hub 12 SP1 |
before 4.14.25-8.2 | 4.14.25-8.2 |
kdelibs4-apidocsSUSE:Package Hub 12 SP1 |
before 4.14.25-8.2 | 4.14.25-8.2 |
kauthSUSE:Package Hub 12 SP2 |
before 5.26.0-6.1 | 5.26.0-6.1 |
kdelibs4SUSE:Package Hub 12 SP2 |
before 4.14.25-8.2 | 4.14.25-8.2 |
kdelibs4-apidocsSUSE:Package Hub 12 SP2 |
before 4.14.25-8.2 | 4.14.25-8.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | KDE 4/5 - 'KAuth' Local Privilege Escalation | 2017-05-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-8422 is a high vulnerability (CVSS 7.8) in Kde Kauth, published May 10, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in kauth 5.28.0-2.
References
securitytracker.com/id/1038480
exploit-db.com/exploits/42053
kde.org/info/security/advisory-20170510-1.txt
bugzilla.redhat.com/show_bug.cgi?id=1449647
securityfocus.com/bid/98412
security.gentoo.org/glsa/201706-29
Show 23 moreShow less
cgit.kde.org/kdelibs.git/commit?id=264e97625abe2e0334f97de17f6ffb52582888ab
debian.org/security/2017/dsa-3849
openwall.com/lists/oss-security/2017/05/10/3
access.redhat.com/errata/RHSA-2017:1264
nvd.nist.gov/vuln/detail/CVE-2017-8422
github.com/advisories/GHSA-3x3g-jj7x-gr2f
security-tracker.debian.org/tracker/CVE-2017-8422
advisories.mageia.org/MGASA-2017-0274.html
bugs.mageia.org/show_bug.cgi?id=20843
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1264.json
cve.org/CVERecord?id=CVE-2017-8422
seclists.org/oss-sec/2017/q2/240
suse.com/support/update/announcement/2017/suse-su-20171335-1
bugzilla.suse.com/1036244
ubuntu.com/security/CVE-2017-8422
lists.opensuse.org/archives/list/[email protected]/thread/OXWF5MZST53JVOUBYO7BZCE4XWZDCW4W