{"id":"CVE-2024-36041","aliases":["ALPINE-CVE-2024-36041","DEBIAN-CVE-2024-36041","DLA-3827-1","DSA-5723-1","EUVD-2024-35851","GHSA-7xfq-9m67-9j5j","MGASA-2024-0214","OESA-2024-1937","UBUNTU-CVE-2024-36041","USN-6843-1","USN-8829-1","openSUSE-SU-2024:0161-1","openSUSE-SU-2024:14018-1"],"status":"published","title":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00293,"percentile":0.22122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-613"],"published":"2024-06-03T00:00:00Z","modified":"2026-11-03T06:32:07Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"plasma-workspace","fixed_in":["6.0.5.1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"plasma-workspace","fixed_in":["6.0.5.1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"plasma-workspace","fixed_in":["6.0.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"plasma-workspace","fixed_in":["6.0.5.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"plasma-workspace","fixed_in":["6.0.5.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"plasma-workspace","fixed_in":["4:5.27.5-2+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"plasma-workspace","fixed_in":["4:5.27.11.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"plasma-workspace","fixed_in":["4:5.27.11.1-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"plasma-workspace","fixed_in":["4:5.14.5.1-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"plasma-workspace","fixed_in":["4:5.20.5-6+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"plasma-workspace","fixed_in":["5.27.10-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"plasma-workspace","fixed_in":["5.27.10-2.oe2403"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"plasma-workspace","fixed_in":["4:5.5.5.2-0ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"plasma-workspace","fixed_in":["4:5.18.8-0ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"plasma-workspace","fixed_in":["4:5.24.7-0ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"plasma-workspace","fixed_in":["4:5.27.11-0ubuntu4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"plasma5-workspace","fixed_in":["5.27.11-bp156.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"plasma5-workspace","fixed_in":["5.27.11-bp156.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0.0"},{"fixed":"6.0.5.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0.0"},{"fixed":"6.0.5.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0.0"},{"fixed":"6.0.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0.0"},{"fixed":"6.0.5.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0.0"},{"fixed":"6.0.5.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.5-2+deb12u2"}]}],"versions":["4:5.27.5-2","4:5.27.5-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.11.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.11.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.14.5.1-1+deb10u1"}]}],"versions":["4:5.14.5.1-1"]},{"source":"osv","ecosystem":"Debian:11","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.20.5-6+deb11u1"}]}],"versions":["4:5.20.5-6"]},{"source":"osv","ecosystem":"Debian:12","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.5-2+deb12u2"}]}],"versions":["4:5.27.5-2","4:5.27.5-2+deb12u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.27.10-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.27.10-2.oe2403"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.5.5.2-0ubuntu1.1+esm1"}]}],"versions":["4:5.4.2-0ubuntu1","4:5.4.3-0ubuntu1","4:5.5.4-0ubuntu1","4:5.5.5.2-0ubuntu1","4:5.5.5.2-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:5.10.5-0ubuntu1","4:5.10.5-0ubuntu2","4:5.11.4-0ubuntu1","4:5.11.5-0ubuntu3","4:5.12.0a-0ubuntu2","4:5.12.1-0ubuntu1","4:5.12.2-0ubuntu1","4:5.12.3-0ubuntu1","4:5.12.4-0ubuntu1","4:5.12.4-0ubuntu2","4:5.12.4-0ubuntu3","4:5.12.5-0ubuntu0.1","4:5.12.6-0ubuntu0.1","4:5.12.7-0ubuntu0.1","4:5.12.8-0ubuntu0.1","4:5.12.9-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.18.8-0ubuntu0.2"}]}],"versions":["4:5.16.5-0ubuntu1","4:5.16.5-0ubuntu2","4:5.17.2-0ubuntu1","4:5.17.3-0ubuntu1","4:5.17.4-0ubuntu1","4:5.17.4-0ubuntu2","4:5.17.4-0ubuntu3","4:5.17.5-0ubuntu1","4:5.17.90-0ubuntu1","4:5.17.90-0ubuntu2","4:5.18.0a-0ubuntu1","4:5.18.1-0ubuntu1","4:5.18.2-0ubuntu2","4:5.18.3-0ubuntu1","4:5.18.3-0ubuntu2","4:5.18.4.1-0ubuntu1","4:5.18.5-0ubuntu0.1","4:5.18.8-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.7-0ubuntu0.2"}]}],"versions":["4:5.22.5-0ubuntu1","4:5.23.0-0ubuntu1","4:5.23.2-0ubuntu1","4:5.23.3-0ubuntu1","4:5.23.4-0ubuntu1","4:5.23.4-0ubuntu2","4:5.23.5-0ubuntu1","4:5.23.90-0ubuntu1","4:5.23.90-0ubuntu2","4:5.24.0b-0ubuntu1","4:5.24.1-0ubuntu1","4:5.24.2-0ubuntu1","4:5.24.3-0ubuntu1","4:5.24.3-0ubuntu3","4:5.24.4-0ubuntu1","4:5.24.6-0ubuntu0.1","4:5.24.7-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.11-0ubuntu4.1"}]}],"versions":["4:5.27.8-0ubuntu1","4:5.27.9.1-0ubuntu1","4:5.27.10-0ubuntu1","4:5.27.10-1ubuntu1","4:5.27.10-2ubuntu2","4:5.27.10-3ubuntu1","4:5.27.11-0ubuntu2","4:5.27.11-0ubuntu3","4:5.27.11-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.18.8-0ubuntu0.2"}]}],"versions":["4:5.16.5-0ubuntu1","4:5.16.5-0ubuntu2","4:5.17.2-0ubuntu1","4:5.17.3-0ubuntu1","4:5.17.4-0ubuntu1","4:5.17.4-0ubuntu2","4:5.17.4-0ubuntu3","4:5.17.5-0ubuntu1","4:5.17.90-0ubuntu1","4:5.17.90-0ubuntu2","4:5.18.0a-0ubuntu1","4:5.18.1-0ubuntu1","4:5.18.2-0ubuntu2","4:5.18.3-0ubuntu1","4:5.18.3-0ubuntu2","4:5.18.4.1-0ubuntu1","4:5.18.5-0ubuntu0.1","4:5.18.8-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.7-0ubuntu0.2"}]}],"versions":["4:5.22.5-0ubuntu1","4:5.23.0-0ubuntu1","4:5.23.2-0ubuntu1","4:5.23.3-0ubuntu1","4:5.23.4-0ubuntu1","4:5.23.4-0ubuntu2","4:5.23.5-0ubuntu1","4:5.23.90-0ubuntu1","4:5.23.90-0ubuntu2","4:5.24.0b-0ubuntu1","4:5.24.1-0ubuntu1","4:5.24.2-0ubuntu1","4:5.24.3-0ubuntu1","4:5.24.3-0ubuntu3","4:5.24.4-0ubuntu1","4:5.24.6-0ubuntu0.1","4:5.24.7-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.27.11-0ubuntu4.1"}]}],"versions":["4:5.27.8-0ubuntu1","4:5.27.9.1-0ubuntu1","4:5.27.10-0ubuntu1","4:5.27.10-1ubuntu1","4:5.27.10-2ubuntu2","4:5.27.10-3ubuntu1","4:5.27.11-0ubuntu2","4:5.27.11-0ubuntu3","4:5.27.11-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"plasma-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.5.5.2-0ubuntu1.1+esm1"}]}],"versions":["4:5.4.2-0ubuntu1","4:5.4.3-0ubuntu1","4:5.5.4-0ubuntu1","4:5.5.5.2-0ubuntu1","4:5.5.5.2-0ubuntu1.1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"plasma5-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.27.11-bp156.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"plasma5-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.27.11-bp156.3.3.1"}]}]}],"products":[{"vendor":"kde","product":"plasma-workspace"}],"references":[{"url":"https://invent.kde.org/plasma/plasma-workspace/","tags":["x_transferred","Product","web"]},{"url":"https://www.x.org/releases/X11R7.7/doc/libSM/xsmp.html","tags":["x_transferred","Product","web"]},{"url":"https://github.com/KDE/plasma-workspace/tags","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://kde.org/info/security/advisory-20240531-1.txt","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00002.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43YGQJGB5I33UBRY2OHXTPXIEESZLZ6N/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNOZWSWXAR6EM3VIUJRSAI3L4QPURQPC/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36041","tags":["advisory"]},{"url":"https://invent.kde.org/plasma/plasma-workspace"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43YGQJGB5I33UBRY2OHXTPXIEESZLZ6N"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNOZWSWXAR6EM3VIUJRSAI3L4QPURQPC"},{"url":"https://github.com/advisories/GHSA-7xfq-9m67-9j5j"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-36041","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-36041","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0214.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33272","tags":["report"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1937","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-36041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-36041","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6843-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8829-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VXFL4FV75KKEUKXI3LJ5OTFGTIP4IVYA/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225774","tags":["report"]},{"url":"https://bugzilla.suse.com/1226110","tags":["report"]},{"url":"https://bugzilla.suse.com/487912","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36041","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T22:06:18.017Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:34:14.985673Z"}],"euvd":[{"id":"EUVD-2024-35851","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T22:06:18Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:20.707326Z"}],"ghsa":[{"id":"GHSA-7xfq-9m67-9j5j","title":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1...","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T03:30:42Z","modified":"2025-11-05T00:31:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T02:15:10Z","modified":"2026-06-17T07:36:00.933Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:10:10.545705Z"}],"osv":[{"id":"ALPINE-CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T02:15:10Z","modified":"2026-11-03T06:32:07.893703464Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T02:15:10Z","modified":"2026-04-16T04:37:05.311018956Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:40.704083Z"},{"id":"DEBIAN-CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-07-05T02:15:10Z","modified":"2026-11-02T12:02:35.026330621Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"OESA-2024-1937","title":"plasma-workspace security update","description":"Plasma 5 libraries and runtime components\r\n\r\nSecurity Fix(es):\r\n\r\nKSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.(CVE-2024-36041)","status":"published","published":"2024-08-02T11:07:24Z","modified":"2026-08-18T01:18:32.557935805Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2024-36041","description":"KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the /tmp directory.","status":"published","published":"2024-06-03T00:00:00Z","modified":"2026-09-28T22:56:46.265381422Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:50.784131Z"},{"id":"DLA-3827-1","title":"plasma-workspace - security update","status":"published","published":"2024-06-14T00:00:00Z","modified":"2026-03-09T01:22:34.773825Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5723-1","title":"plasma-workspace - security update","status":"published","published":"2024-06-27T00:00:00Z","modified":"2026-03-09T02:09:27.841941Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0214","title":"Updated plasma-workspace packages fix security vulnerability","description":"KSmserver, KDE's XSMP manager, incorrectly allows connections via ICE\nbased purely on the host, allowing all local connections. This allows\nanother user on the same machine to gain access to the session\nmanager.\nA well crafted client could use the session restore feature to execute\narbitrary code as the user on the next boot.\n","status":"published","published":"2024-06-07T17:31:41Z","modified":"2026-04-16T04:42:38.684496983Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0161-1","title":"Security update for plasma5-workspace","description":"\nplasma5-workspace was updated to fix the following issue:\n\n\n- Fixed ksmserver authentication (CVE-2024-36041, boo#1225774).\n\n- Fixed a regression introduced by the preceding change (kde#487912, boo#1226110):\n\n","status":"published","published":"2024-06-13T20:01:46Z","modified":"2026-02-04T04:19:23.63732Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14018-1","title":"plasma6-session-6.0.5-2.1 on GA media","description":"These are all security issues fixed in the plasma6-session-6.0.5-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:12.518668Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"USN-6843-1","title":"plasma-workspace vulnerability","description":"Fabian Vogt discovered that Plasma Workspace incorrectly handled\nconnections via ICE. A local attacker could possibly use this issue to\ngain access to another user's session manager and execute arbitrary code.\n","status":"published","published":"2024-06-26T12:12:09Z","modified":"2026-04-27T17:17:37.602966Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-8829-1","title":"plasma-workspace vulnerability","description":"Fabian Vogt discovered that Plasma Workspace did not properly authenticate\nlocal clients connecting to the session manager. A local attacker could\npossibly use this issue to execute arbitrary code as another user.","status":"published","published":"2026-09-28T13:42:58Z","modified":"2026-09-28T22:57:44.339555557Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}