Search CVE reports
1 – 10 of 30 results
CVE-2012-4512
Low priorityThe CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face source, related to "type confusion."
2 affected packages
kde-baseapps, kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-baseapps | — | — | — | — | Not affected |
| kdebase | — | — | — | — | Not in release |
CVE-2013-4133
Negligible prioritykde-workspace before 4.10.5 has a memory leak in plasma desktop
2 affected packages
kde-workspace, kdebase-workspace
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-workspace | — | — | — | — | — |
| kdebase-workspace | — | — | — | — | — |
CVE-2013-7252
Low prioritykwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.
2 affected packages
kde-runtime, kdebase-runtime
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-runtime | — | — | — | — | — |
| kdebase-runtime | — | — | — | — | — |
CVE-2012-4515
Low priorityUse-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by...
2 affected packages
kde-baseapps, kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-baseapps | — | — | — | — | Not affected |
| kdebase | — | — | — | — | Not in release |
CVE-2012-4514
Low priorityrendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a frame with a null part."
2 affected packages
kde-baseapps, kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-baseapps | — | — | — | — | Not affected |
| kdebase | — | — | — | — | Not in release |
CVE-2012-4513
Low prioritykhtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpected sign extension and...
2 affected packages
kde-baseapps, kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kde-baseapps | — | — | — | — | Not affected |
| kdebase | — | — | — | — | Not in release |
CVE-2010-0436
Medium prioritySome fixes available 3 of 6
Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain...
2 affected packages
kdebase, kdebase-workspace
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kdebase | — | — | — | — | — |
| kdebase-workspace | — | — | — | — | — |
CVE-2010-0923
Medium priorityRace condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 allows physically proximate attackers to bypass KScreenSaver screen locking and access an unattended workstation by pressing...
1 affected packages
kdebase-workspace
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kdebase-workspace | — | — | — | — | — |
CVE-2009-2537
Low priorityKDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.
1 affected packages
kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kdebase | — | — | — | — | — |
CVE-2008-5712
Negligible priorityThe HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE,...
1 affected packages
kdebase
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| kdebase | — | — | — | — | — |