CVE-2019-14744
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
CVE-2019-14744- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-78
- Updated
- 2026-11-02
CVE List No score
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
CVE-2019-14744- Updated
- 2026-11-02
EUVDEUVD-2019-5884 No score
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
EUVD-2019-5884- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7r6x-j8mj-9g3p
7.8
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
GHSA-7r6x-j8mj-9g3p- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
OSV
7.8
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
CVE-2019-14744- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-14744
7.8
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
DEBIAN-CVE-2019-14744- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 12 moreShow less
OSVOESA-2021-1295
7.8
kf5-kconfig security update
KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui.
Security Fix(es):
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.(CVE-2019-14744)
- Record
OESA-2021-1295- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:2606
8.8
Red Hat Security Advisory: kdelibs and kde-settings security and bug fix update
- Record
RHSA-2019:2606- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2833
8.8
Red Hat Security Advisory: kdelibs security update
- Record
RHSA-2020:2833- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-14744
7.8
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
- Record
UBUNTU-CVE-2019-14744- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0278 No score
Updated kconfig packages fix security vulnerability
Updated kconfig packages fix security vulnerability:
Dominik Penner discovered that KConfig supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed .desktop file (e.g. if it's embedded into a downloaded archive and it gets opened in a file browser) arbitrary commands could get executed (CVE-2019-14744).
This update fixes the security issue by removing the shell command feature.
- Record
MGASA-2019-0278- Updated
- 2026-11-02
OSVMGASA-2019-0378 No score
Updated kdelibs4 packages fix security vulnerability
kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction (CVE-2019-14744).
- Record
MGASA-2019-0378- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1851-1 No score
Security update for kconfig, kdelibs4
This update for kconfig, kdelibs4 fixes the following issues:
- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).
- Record
openSUSE-SU-2019:1851-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1851-2 No score
Security update for kconfig, kdelibs4
This update for kconfig, kdelibs4 fixes the following issues:
- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).
- Record
openSUSE-SU-2019:1851-2- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1855-1 No score
Security update for kconfig, kdelibs4
This update for kconfig, kdelibs4 fixes the following issues:
- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:1855-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1898-1 No score
Security update for kconfig, kdelibs4
This update for kconfig, kdelibs4 fixes the following issues:
- CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600).
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2019:1898-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10889-1 No score
kconf_update5-5.86.0-1.2 on GA media
These are all security issues fixed in the kconf_update5-5.86.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10889-1- Updated
- 2026-11-02
OSVUSN-4100-1 No score
kconfig, kde4libs vulnerabilities
It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. (CVE-2019-14744)
It was discovered that KConfig allows remote attackers to write to arbitrary files via a ../ in a filename in an archive file. (CVE-2016-6232)
- Record
USN-4100-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kconfigDebian:12 |
before 5.54.0-2 | 5.54.0-2 |
kconfigDebian:13 |
before 5.54.0-2 | 5.54.0-2 |
kconfigDebian:14 |
before 5.54.0-2 | 5.54.0-2 |
kde4libsDebian:8 |
before 4:4.14.2-5+deb8u3, plus listed versions 4:4.14.2-54:4.14.2-5+deb8u14:4.14.2-5+deb8u2 |
4:4.14.2-5+deb8u3 |
kconfigDebian:9 |
before 5.28.0-2+deb9u1, plus listed versions 5.28.0-2 |
5.28.0-2+deb9u1 |
kconfigDebian:10 |
before 5.54.0-1+deb10u1, plus listed versions 5.54.0-1 |
5.54.0-1+deb10u1 |
kconfigMageia:6 |
before 5.42.0-1.1.mga6 | 5.42.0-1.1.mga6 |
kconfigMageia:7 |
before 5.57.0-1.1.mga7 | 5.57.0-1.1.mga7 |
kdelibs4Mageia:7 |
before 4.14.38-7.1.mga7 | 4.14.38-7.1.mga7 |
kf5-kconfigopenEuler:20.03-LTS-SP1 |
before 5.55.0-3.oe1 | 5.55.0-3.oe1 |
Show 92 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kde-settingsRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-ksplashRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-plasmaRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-pulseaudioRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibsRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-commonRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
qt-settingsRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-minimalRed Hat:enterprise_linux:7::client |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibs-apidocsRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-develRed Hat:enterprise_linux:7::client |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kde-settingsRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibsRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-commonRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
qt-settingsRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-ksplashRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-minimalRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-plasmaRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-pulseaudioRed Hat:enterprise_linux:7::computenode |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibs-apidocsRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-develRed Hat:enterprise_linux:7::computenode |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kde-settingsRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-ksplashRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-plasmaRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-pulseaudioRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibsRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-commonRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-develRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
qt-settingsRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-minimalRed Hat:enterprise_linux:7::server |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibs-apidocsRed Hat:enterprise_linux:7::server |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kde-settingsRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-ksplashRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-plasmaRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-pulseaudioRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibsRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-commonRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-debuginfoRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-develRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibs-ktexteditorRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
qt-settingsRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kde-settings-minimalRed Hat:enterprise_linux:7::workstation |
before 0:19-23.10.el7_7 | 0:19-23.10.el7_7 |
kdelibs-apidocsRed Hat:enterprise_linux:7::workstation |
before 6:4.14.8-11.el7_7 | 6:4.14.8-11.el7_7 |
kdelibsRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-commonRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-debuginfoRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-ktexteditorRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-apidocsRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-develRed Hat:rhel_eus:7.6::computenode |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibsRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-commonRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-debuginfoRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-develRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-ktexteditorRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kdelibs-apidocsRed Hat:rhel_eus:7.6::server |
before 6:4.14.8-8.el7_6 | 6:4.14.8-8.el7_6 |
kde4libsUbuntu:Pro:14.04:LTS |
before 4:4.13.3-0ubuntu0.5+esm1, plus listed versions 4:4.11.2-0ubuntu24:4.11.2-0ubuntu34:4.11.2-0ubuntu44:4.11.80-0ubuntu14:4.11.95-0ubuntu1 Show 21 moreShow less4:4.11.97-0ubuntu14:4.11.97-0ubuntu24:4.12.0-0ubuntu14:4.12.1-0ubuntu14:4.12.2-0ubuntu14:4.12.2-0ubuntu24:4.12.3-0ubuntu14:4.12.90-0ubuntu14:4.12.95-0ubuntu14:4.12.97-0ubuntu14:4.13.0-0ubuntu14:4.13.0-0ubuntu1.14:4.13.1-0ubuntu0.14:4.13.1-0ubuntu0.24:4.13.2a-0ubuntu0.24:4.13.2a-0ubuntu0.34:4.13.3-0ubuntu0.14:4.13.3-0ubuntu0.24:4.13.3-0ubuntu0.34:4.13.3-0ubuntu0.44:4.13.3-0ubuntu0.5 |
4:4.13.3-0ubuntu0.5+esm1 |
kconfigUbuntu:16.04:LTS |
before 5.18.0-0ubuntu1.1, plus listed versions 5.15.0-0ubuntu15.15.0-0ubuntu25.18.0-0ubuntu1 |
5.18.0-0ubuntu1.1 |
kde4libsUbuntu:16.04:LTS |
before 4:4.14.16-0ubuntu3.3, plus listed versions 4:4.14.13-0ubuntu14:4.14.13-0ubuntu24:4.14.13-0ubuntu34:4.14.13-0ubuntu44:4.14.13-0ubuntu6 Show 4 moreShow less4:4.14.16-0ubuntu14:4.14.16-0ubuntu34:4.14.16-0ubuntu3.14:4.14.16-0ubuntu3.2 |
4:4.14.16-0ubuntu3.3 |
kconfigUbuntu:18.04:LTS |
before 5.44.0-0ubuntu1.1, plus listed versions 5.38.0-0ubuntu15.40.0-0ubuntu15.41.0-0ubuntu15.42.0-0ubuntu15.43.0-0ubuntu15.44.0-0ubuntu1 |
5.44.0-0ubuntu1.1 |
kde4libsUbuntu:18.04:LTS |
before 4:4.14.38-0ubuntu3.1, plus listed versions 4:4.14.34-0ubuntu24:4.14.38-0ubuntu24:4.14.38-0ubuntu3 |
4:4.14.38-0ubuntu3.1 |
kconfigSUSE:Package Hub 12 SP1 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4SUSE:Package Hub 12 SP1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsSUSE:Package Hub 12 SP1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigSUSE:Package Hub 12 SP2 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4SUSE:Package Hub 12 SP2 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsSUSE:Package Hub 12 SP2 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigSUSE:Package Hub 12 SP3 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4SUSE:Package Hub 12 SP3 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsSUSE:Package Hub 12 SP3 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigSUSE:Package Hub 15 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4SUSE:Package Hub 15 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsSUSE:Package Hub 15 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigSUSE:Package Hub 15 SP1 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4SUSE:Package Hub 15 SP1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsSUSE:Package Hub 15 SP1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigopenSUSE:Leap 15.0 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4openSUSE:Leap 15.0 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsopenSUSE:Leap 15.0 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigopenSUSE:Leap 15.1 |
before 5.55.0-bp151.3.5.1 | 5.55.0-bp151.3.5.1 |
kdelibs4openSUSE:Leap 15.1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kdelibs4-apidocsopenSUSE:Leap 15.1 |
before 4.14.38-bp151.9.5.1 | 4.14.38-bp151.9.5.1 |
kconfigSUSE:Package Hub 15 |
before 5.45.0-bp150.3.8.2 | 5.45.0-bp150.3.8.2 |
kdelibs4SUSE:Package Hub 15 |
before 4.14.38-bp150.3.8.1 | 4.14.38-bp150.3.8.1 |
kdelibs4-apidocsSUSE:Package Hub 15 |
before 4.14.38-bp150.3.8.1 | 4.14.38-bp150.3.8.1 |
kconfigSUSE:Package Hub 15 SP1 |
before 5.55.0-bp151.3.8.1 | 5.55.0-bp151.3.8.1 |
kdelibs4SUSE:Package Hub 15 SP1 |
before 4.14.38-bp151.9.8.2 | 4.14.38-bp151.9.8.2 |
kdelibs4-apidocsSUSE:Package Hub 15 SP1 |
before 4.14.38-bp151.9.8.1 | 4.14.38-bp151.9.8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14744 is a high vulnerability (CVSS 7.8) in Kde Kconfig, published August 7, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.07%, the 90th percentile. Fixed in kconfig 5.54.0-2.
References
gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt
zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter
seclists.org/bugtraq/2019/Aug/9
packetstormsecurity.com/files/153981/Slackware-Security-Advisory-kdelibs-Updates.html
debian.org/security/2019/dsa-4494
seclists.org/bugtraq/2019/Aug/12
Show 44 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTFBQRJAU7ITD3TOMPZAUQMYYCAZ6DTX
lists.opensuse.org/opensuse-security-announce/2019-08/msg00013.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00016.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IRIKH7ZWXELIQT6WSLV7EG3VTFWKZPD
lists.opensuse.org/opensuse-security-announce/2019-08/msg00034.html
security.gentoo.org/glsa/201908-07
lists.debian.org/debian-lts-announce/2019/08/msg00023.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNHO6FZRYBQ2R3UCFDGS66F6DNNTKCMM
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYKLUSSEK3YJOVQDL6K2LKGS3354UH6L
usn.ubuntu.com/4100-1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YIDXQ6CUB5E7Y3MJWCUY4VR42QAE6SCJ
access.redhat.com/errata/RHSA-2019:2606
nvd.nist.gov/vuln/detail/CVE-2019-14744
lists.fedoraproject.org/archives/list/[email protected]/message/5IRIKH7ZWXELIQT6WSLV7EG3VTFWKZPD
lists.fedoraproject.org/archives/list/[email protected]/message/FNHO6FZRYBQ2R3UCFDGS66F6DNNTKCMM
lists.fedoraproject.org/archives/list/[email protected]/message/UYKLUSSEK3YJOVQDL6K2LKGS3354UH6L
lists.fedoraproject.org/archives/list/[email protected]/message/WTFBQRJAU7ITD3TOMPZAUQMYYCAZ6DTX
lists.fedoraproject.org/archives/list/[email protected]/message/YIDXQ6CUB5E7Y3MJWCUY4VR42QAE6SCJ
github.com/advisories/GHSA-7r6x-j8mj-9g3p
security-tracker.debian.org/tracker/CVE-2019-14744
advisories.mageia.org/MGASA-2019-0278.html
bugs.mageia.org/show_bug.cgi?id=25250
kde.org/info/security/advisory-20190807-1.txt
advisories.mageia.org/MGASA-2019-0378.html
bugs.mageia.org/show_bug.cgi?id=25403
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1295
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1740042
bugzilla.redhat.com/show_bug.cgi?id=1740138
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2606.json
access.redhat.com/security/cve/CVE-2019-14744
cve.org/CVERecord?id=CVE-2019-14744
access.redhat.com/errata/RHSA-2020:2833
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2833.json
ubuntu.com/security/CVE-2019-14744
phabricator.kde.org/D22979
ubuntu.com/security/notices/USN-4100-1
ubuntu.com/security/CVE-2016-6232
lists.opensuse.org/archives/list/[email protected]/thread/NUT64UDNW74IDXCK3DKVBYT7T2GAOQ4A
bugzilla.suse.com/1144600
suse.com/security/cve/CVE-2019-14744
lists.opensuse.org/archives/list/[email protected]/thread/ZQO5EYPXIVZ5HZPEQ377KQFRRENZNQJI
lists.opensuse.org/archives/list/[email protected]/thread/3PV6Z3TCAM4W7P2QXLK2LD7IRGXUU5R7
lists.opensuse.org/archives/list/[email protected]/thread/JRL77WXMC2B6FM2K6QCBCXRGCZBFJF3O