{"id":"CVE-2017-8422","aliases":["DEBIAN-CVE-2017-8422","DLA-952-1","DSA-3849-1","EUVD-2017-17373","GHSA-3x3g-jj7x-gr2f","MGASA-2017-0274","RHSA-2017:1264","SUSE-SU-2017:1335-1","UBUNTU-CVE-2017-8422","USN-3286-1","openSUSE-SU-2017:1254-1","openSUSE-SU-2017:1272-1","openSUSE-SU-2024:10887-1"],"status":"published","title":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01805,"percentile":0.78701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-290"],"published":"2017-05-10T00:00:00Z","modified":"2026-10-24T10:30:21Z","exploits":[{"source":"exploitdb","id":"EDB-42053","title":"KDE 4/5 - 'KAuth' Local Privilege Escalation","type":"local","platform":"linux","date":"2017-05-18","url":"https://www.exploit-db.com/exploits/42053"}],"fixes":[{"ecosystem":"Debian:12","package":"kauth","fixed_in":["5.28.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kauth","fixed_in":["5.28.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kauth","fixed_in":["5.28.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kauth","fixed_in":["5.5.0-1.1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"kdelibs4","fixed_in":["4.14.30-1.1.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-common","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-devel","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-common","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-devel","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-common","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-devel","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-common","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-debuginfo","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-devel","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-ktexteditor","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-apidocs","fixed_in":["6:4.14.8-6.el7_3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kdelibs4","fixed_in":["4.12.0-10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"kde4libs","fixed_in":["4:4.13.3-0ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"kauth","fixed_in":["5.18.0-0ubuntu2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"kde4libs","fixed_in":["4:4.14.16-0ubuntu3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kauth","fixed_in":["5.26.0-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","fixed_in":["4.14.25-8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","fixed_in":["4.14.25-8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kauth","fixed_in":["5.26.0-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","fixed_in":["4.14.25-8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","fixed_in":["4.14.25-8.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.0-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.8.4-4+deb7u3"}]}],"versions":["4:4.8.4-4","4:4.8.4-4+deb7u1","4:4.8.4-4+deb7u2"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.2-5+deb8u2"}]}],"versions":["4:4.14.2-5","4:4.14.2-5+deb8u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1.1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.30-1.1.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-ktexteditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdelibs-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6:4.14.8-6.el7_3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.0-10.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu0.5"}]}],"versions":["4:4.11.2-0ubuntu2","4:4.11.2-0ubuntu3","4:4.11.2-0ubuntu4","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.11.97-0ubuntu2","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.2-0ubuntu2","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.0-0ubuntu1.1","4:4.13.1-0ubuntu0.1","4:4.13.1-0ubuntu0.2","4:4.13.2a-0ubuntu0.2","4:4.13.2a-0ubuntu0.3","4:4.13.3-0ubuntu0.1","4:4.13.3-0ubuntu0.2","4:4.13.3-0ubuntu0.3","4:4.13.3-0ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.0-0ubuntu2"}]}],"versions":["5.15.0-0ubuntu1","5.15.0-0ubuntu2","5.18.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.14.16-0ubuntu3.2"}]}],"versions":["4:4.14.13-0ubuntu1","4:4.14.13-0ubuntu2","4:4.14.13-0ubuntu3","4:4.14.13-0ubuntu4","4:4.14.13-0ubuntu6","4:4.14.16-0ubuntu1","4:4.14.16-0ubuntu3","4:4.14.16-0ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"kde4libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu0.5"}]}],"versions":["4:4.11.2-0ubuntu2","4:4.11.2-0ubuntu3","4:4.11.2-0ubuntu4","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.11.97-0ubuntu2","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.2-0ubuntu2","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.0-0ubuntu1.1","4:4.13.1-0ubuntu0.1","4:4.13.1-0ubuntu0.2","4:4.13.2a-0ubuntu0.2","4:4.13.2a-0ubuntu0.3","4:4.13.3-0ubuntu0.1","4:4.13.3-0ubuntu0.2","4:4.13.3-0ubuntu0.3","4:4.13.3-0ubuntu0.4"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"kdelibs4-apidocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.25-8.2"}]}]}],"products":[{"vendor":"kde","product":"kauth"},{"vendor":"kde","product":"kdelibs"}],"references":[{"url":"http://www.securitytracker.com/id/1038480","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://www.exploit-db.com/exploits/42053/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"https://www.kde.org/info/security/advisory-20170510-1.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","advisory","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449647","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://www.securityfocus.com/bid/98412","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201706-29","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://cgit.kde.org/kdelibs.git/commit/?id=264e97625abe2e0334f97de17f6ffb52582888ab","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.debian.org/security/2017/dsa-3849","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://cgit.kde.org/kauth.git/commit/?id=df875f725293af53399f5146362eb158b4f9216a","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2017/05/10/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1264","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8422","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/42053"},{"url":"https://github.com/advisories/GHSA-3x3g-jj7x-gr2f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-8422","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0274.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20843","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3849","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1264.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8422","tags":["advisory","report"]},{"url":"http://seclists.org/oss-sec/2017/q2/240","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171335-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1036244","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8422","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-8422","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3286-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXWF5MZST53JVOUBYO7BZCE4XWZDCW4W/#OXWF5MZST53JVOUBYO7BZCE4XWZDCW4W","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/33KAK55QRSQ35AXMIM7ZB7B3VAJ3M553/#33KAK55QRSQ35AXMIM7ZB7B3VAJ3M553","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7443","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-8422","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-17T14:00:00Z","modified":"2024-08-05T16:34:22.978Z","updated_at":"2026-11-02T14:33:14.89365Z"}],"euvd":[{"id":"EUVD-2017-17373","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-17T14:00:00Z","modified":"2024-08-05T16:34:22Z","updated_at":"2026-11-03T02:39:05.365606Z"}],"ghsa":[{"id":"GHSA-3x3g-jj7x-gr2f","title":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2022-05-13T01:47:32Z","modified":"2025-04-20T03:37:46Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T15:01:45.195531Z"}],"nvd":[{"id":"CVE-2017-8422","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-17T14:29:00.387Z","modified":"2026-06-17T01:26:21.967Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:03:47.848196Z"}],"osv":[{"id":"CVE-2017-8422","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-17T14:29:00.387Z","modified":"2026-10-24T10:30:21.114470395Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-8422","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-17T14:29:00.387Z","modified":"2026-09-01T20:02:41.744262773Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"RHSA-2017:1264","title":"Red Hat Security Advisory: kdelibs security update","status":"published","published":"2024-09-16T00:21:33Z","modified":"2026-06-26T12:22:06.569617617Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-8422","description":"KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.","status":"published","published":"2017-05-10T00:00:00Z","modified":"2026-04-22T11:34:15.35763Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DLA-952-1","title":"kde4libs - security update","status":"published","published":"2017-05-25T00:00:00Z","modified":"2026-03-09T02:11:32.736488Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3849-1","title":"kde4libs - security update","status":"published","published":"2017-05-12T00:00:00Z","modified":"2026-03-09T01:23:08.870805Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0274","title":"Updated kauth and kdelibs4 packages fix security vulnerability","description":"Sebastian Krahmer from SUSE discovered that the KAuth framework contains a\nlogic flaw in which the service invoking dbus is not properly checked. This\nflaw allows spoofing the identity of the caller and gaining root privileges\nfrom an unprivileged account (CVE-2017-8422).\n","status":"published","published":"2017-08-16T22:32:05Z","modified":"2026-04-16T06:22:54.899535162Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2017:1254-1","title":"Security update for kauth, kdelibs4","description":"This update for kauth and kdelibs4 fixes the following issues:\n\n- CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244).\n","status":"published","published":"2017-05-15T11:40:03Z","modified":"2025-05-02T04:29:49.611424Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:1272-1","title":"Security update for kauth, kdelibs4","description":"This update for kauth and kdelibs4 fixes the following issues:\n\n- CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244).\n","status":"published","published":"2017-05-15T11:40:03Z","modified":"2026-02-04T03:41:25.307589Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10887-1","title":"kauth-devel-5.86.0-1.2 on GA media","description":"These are all security issues fixed in the kauth-devel-5.86.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:31:28.799325Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:1335-1","title":"Security update for kdelibs4","description":"\nThis update for kdelibs4 fixes the following issues:\n\n- CVE-2017-8422: This update fixes problem in the DBUS authentication of the kauth framework\n  that could be used to escalate privileges depending on bugs or misimplemented dbus\n  services. (boo#1036244)\n","status":"published","published":"2017-05-18T10:25:11Z","modified":"2026-02-04T03:26:05.781593Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3286-1","title":"kde4libs vulnerability","description":"Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly\nchecked services invoking D-Bus. A local attacker could use this issue to\ngain root privileges.\n","status":"published","published":"2017-05-15T13:27:37Z","modified":"2026-04-22T09:35:22.691554Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}