{"id":"CVE-2014-8651","aliases":["EUVD-2014-8487","GHSA-qpg7-58m4-m59v","MGASA-2014-0445","MGASA-2014-0480","SUSE-SU-2016:0303-1","UBUNTU-CVE-2014-8651","openSUSE-SU-2024:10328-1"],"status":"published","title":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1...","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00388,"percentile":0.33202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2014-11-07T00:00:00Z","modified":"2026-06-17T00:17:05Z","fixes":[{"ecosystem":"Mageia:3","package":"kdebase4-workspace","fixed_in":["4.10.5-1.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"kdebase4-workspace","fixed_in":["4.11.14-1.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kdebase4-wallpapers","fixed_in":["4.3.5-0.11.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kdebase4-workspace","fixed_in":["4.3.5-0.12.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"kde-workspace","fixed_in":["4:4.11.11-0ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5-1.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14-1.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kdebase4-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.11.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-0.12.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"kde-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.11.11-0ubuntu0.2"}]}],"versions":["4:4.11.2-0ubuntu1","4:4.11.2-0ubuntu2","4:4.11.3-0ubuntu1","4:4.11.3-0ubuntu2","4:4.11.4-0ubuntu1","4:4.11.4-0ubuntu2","4:4.11.4-0ubuntu3","4:4.11.5-0ubuntu1","4:4.11.5-0ubuntu2","4:4.11.5-0ubuntu3","4:4.11.5-0ubuntu4","4:4.11.6-0ubuntu1","4:4.11.6-0ubuntu2","4:4.11.6-0ubuntu4","4:4.11.6-0ubuntu5","4:4.11.7-0ubuntu1","4:4.11.8-0ubuntu1","4:4.11.8-0ubuntu2","4:4.11.8-0ubuntu3","4:4.11.8-0ubuntu4","4:4.11.8-0ubuntu5","4:4.11.8-0ubuntu6","4:4.11.9-0ubuntu0.2","4:4.11.10-0ubuntu0.1","4:4.11.11-0ubuntu0.1"]}],"products":[{"vendor":"kde","product":"kde-workspace"},{"vendor":"kde","product":"plasma-desktop"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2014/11/04/9","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201512-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://www.kde.org/info/security/advisory-20141106-1.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.ubuntu.com/usn/USN-2402-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2014/11/07/3","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/70904","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8651"},{"url":"https://github.com/advisories/GHSA-qpg7-58m4-m59v"},{"url":"https://advisories.mageia.org/MGASA-2014-0445.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14487","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=3310","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=9086","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11050","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0480.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14578","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=127861","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=337433","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=338883","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160303-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/904625","tags":["report"]},{"url":"https://bugzilla.suse.com/929718","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8651","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-8651","tags":["report"]},{"url":"https://git.reviewboard.kde.org/r/120977/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2402-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8651","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-8651","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","status":"published","published":"2014-12-06T21:00:00Z","modified":"2024-08-06T13:26:01.645Z","updated_at":"2026-11-02T14:33:43.206348Z"}],"euvd":[{"id":"EUVD-2014-8487","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","status":"published","published":"2014-12-06T21:00:00Z","modified":"2024-08-06T13:26:01Z","updated_at":"2026-11-03T01:56:51.537817Z"}],"ghsa":[{"id":"GHSA-qpg7-58m4-m59v","title":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1...","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","status":"published","published":"2022-05-17T03:28:27Z","modified":"2023-01-27T05:07:04Z","updated_at":"2026-11-02T14:43:02.793588Z"}],"nvd":[{"id":"CVE-2014-8651","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","status":"published","published":"2014-12-06T21:59:00.077Z","modified":"2026-06-17T00:17:05.677Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"MGASA-2014-0445","title":"Updated kdebase4-workspace packages fix security vulnerability and various bugs","description":"This update fixes a security vulnerability in the KDE workspace\nconfiguration module for setting the date and time (CVE-2014-8651,\nmga#14487), and fixes some additional issues:\n  - fix kcm botching unrelated user settings (mga#3310, bko#254430),\n  - do not popup during initialization 0 B Removable media (mga#11050,\n    bko#318061),\n  - fix new graphical session numbers (mga#9086).\n","status":"published","published":"2014-11-14T00:57:44Z","modified":"2026-04-16T06:23:50.795488621Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0480","title":"Updated kdebase4-workspace packages fix security vulnerability and various bugs","description":"This update fixes a security vulnerability in the KDE workspace\nconfiguration module for setting the date and time (CVE-2014-8651,\nmga#14578), and fixes some additional issues:\n - fix foreground color for GTK2 menus (bko#127861),\n - improve contrast for rendering checkbox marks, arrows, etc.\n   (bko#337433),\n - fix icons size in kmenuedit (bko#338883).\n","status":"published","published":"2014-11-21T13:38:07Z","modified":"2026-04-16T06:25:37.202689015Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10328-1","title":"plasma5-desktop-5.8.4-1.1 on GA media","description":"These are all security issues fixed in the plasma5-desktop-5.8.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:37:31.91175Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:0303-1","title":"Security update for kdebase4-workspace","description":"\nThis update for kdebase4-workspace fixes the following issues:\n\n- CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used (bsc#904625)\n\nThe following non-security bugs were fixed:\n\n- bsc#929718: Make kdm recognize an IPv6 localhost address as localhost\n\n","status":"published","published":"2016-02-01T15:44:40Z","modified":"2026-02-04T03:20:36.710432Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-8651","description":"The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.","status":"published","published":"2014-11-07T00:00:00Z","modified":"2026-04-22T09:55:20.45622Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}