KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.

security fix for CVE-2017-8422.
https://www.kde.org/info/security/advisory-20170510-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for kdelibs is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Desktop Environment.

Security Fix(es) :

* A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application. (CVE-2017-8422)

Red Hat would like to thank Sebastian Krahmer (SUSE) for reporting this issue.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201706-29 (KAuth and KDELibs: Privilege escalation)

    KAuth and KDELibs contains a logic flaw in which the service invoking       D-Bus is not properly checked. This allows spoofing the identity of the       caller and with some carefully crafted calls can lead to gaining root       from an unprivileged account.
  Impact :

    A local attacker could spoof the identity of the caller invoking D-Bus,       possibly resulting in gaining privileges.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems :

CVE-2017-6410

Itzik Kotler, Yonatan Fridburg and Amit Klein of Safebreach Labs reported that URLs are not sanitized before passing them to FindProxyForURL, potentially allowing a remote attacker to obtain sensitive information via a crafted PAC file.

CVE-2017-8422

Sebastian Krahmer from SUSE discovered that the KAuth framework contains a logic flaw in which the service invoking dbus is not properly checked. This flaw allows spoofing the identity of the caller and gaining root privileges from an unprivileged account.

CVE-2013-2074

It was discovered that KIO would show web authentication credentials in some error cases.

For Debian 7 'Wheezy', these problems have been fixed in version 4:4.8.4-4+deb7u3.

We recommend that you upgrade your kde4libs packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - A privilege escalation flaw was found in the way kdelibs     handled D-Bus messages. A local user could potentially     use this flaw to gain root privileges by spoofing a     callerID and leveraging a privileged helper application.
    (CVE-2017-8422)

An update for kdelibs is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Desktop Environment.

Security Fix(es) :

* A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application. (CVE-2017-8422)

Red Hat would like to thank Sebastian Krahmer (SUSE) for reporting this issue.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1264 advisory.

    [6:4.14.8-6]
    - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)       Resolves: CVE-2017-8422

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for kdelibs4 fixes the following issues :

  - CVE-2017-8422: This update fixes problem in the DBUS     authentication of the kauth framework that could be used     to escalate privileges depending on bugs or     misimplemented dbus services. (boo#1036244)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New kdelibs packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3286-1 advisory.

    Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking     D-Bus. A local attacker could use this issue to gain root privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for kauth and kdelibs4 fixes the following issues :

  - CVE-2017-8422: logic flaw in the KAuth framework allowed     privilege escalation (boo#1036244).

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2017-6410     Itzik Kotler, Yonatan Fridburg and Amit Klein of     Safebreach Labs reported that URLs are not sanitized     before passing them to FindProxyForURL, potentially     allowing a remote attacker to obtain sensitive     information via a crafted PAC file.

  - CVE-2017-8422     Sebastian Krahmer from SUSE discovered that the KAuth     framework contains a logic flaw in which the service     invoking dbus is not properly checked. This flaw allows     spoofing the identity of the caller and gaining root     privileges from an unprivileged account.

Albert Astals Cid reports :

KAuth contains a logic flaw in which the service invoking dbus is not properly checked. This allows spoofing the identity of the caller and with some carefully crafted calls can lead to gaining root from an unprivileged account.

ID	Name	Product	Family	Severity
101735	Fedora 26 : 6:kdelibs (2017-dd51077c87)	Nessus	Fedora Local Security Checks	high
101567	Fedora 26 : kf5-kauth (2017-0898c704a1)	Nessus	Fedora Local Security Checks	high
101468	Virtuozzo 7 : kdelibs / kdelibs-apidocs / kdelibs-common / etc (VZLSA-2017-1264)	Nessus	Virtuozzo Local Security Checks	high
101075	GLSA-201706-29 : KAuth and KDELibs: Privilege escalation	Nessus	Gentoo Local Security Checks	high
100431	Debian DLA-952-1 : kde4libs security update	Nessus	Debian Local Security Checks	high
100349	Scientific Linux Security Update : kdelibs on SL7.x x86_64 (20170522)	Nessus	Scientific Linux Local Security Checks	high
100345	RHEL 7 : kdelibs (RHSA-2017:1264)	Nessus	Red Hat Local Security Checks	high
100343	Oracle Linux 7 : kdelibs (ELSA-2017-1264)	Nessus	Oracle Linux Local Security Checks	high
100328	CentOS 7 : kdelibs (CESA-2017:1264)	Nessus	CentOS Local Security Checks	high
100290	SUSE SLED12 / SLES12 Security Update : kdelibs4 (SUSE-SU-2017:1335-1)	Nessus	SuSE Local Security Checks	high
100229	Fedora 24 : 6:kdelibs (2017-8b4898ce81)	Nessus	Fedora Local Security Checks	high
100224	Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : kdelibs (SSA:2017-136-02)	Nessus	Slackware Local Security Checks	high
100217	Ubuntu 14.04 LTS : KDE-Libs vulnerability (USN-3286-1)	Nessus	Ubuntu Local Security Checks	high
100202	openSUSE Security Update : kauth / kdelibs4 (openSUSE-2017-575)	Nessus	SuSE Local Security Checks	high
100197	Fedora 25 : 6:kdelibs (2017-aff6f6bd9d)	Nessus	Fedora Local Security Checks	high
100193	Fedora 25 : kf5-kauth (2017-7e3437b905)	Nessus	Fedora Local Security Checks	high
100191	Fedora 24 : kf5-kauth (2017-6bdbf57f29)	Nessus	Fedora Local Security Checks	high
100163	Debian DSA-3849-1 : kde4libs - security update	Nessus	Debian Local Security Checks	high
100113	FreeBSD : kauth: Local privilege escalation (0baee383-356c-11e7-b9a9-50e549ebab6c)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-8422

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high