An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2141 advisory.

    kdelibs     [6:4.14.8-10]
    - Do not fork konsole process when opening terminal from apps using dolphin-part       Resolves: bz#1710362

    [6:4.14.8-9]
    - Do not fork konsole process when opening terminal from apps using dolphin-part       Resolves: bz#1710362

    [6:4.14.8-8]
    - Disable JAR repack script to avoid multilib regression       Resolves: bz#1542864

    [6:4.14.8-7]
    - Handle case-sensitive mime types       Resolves: bz#1542864

    kde-settings     [19-23.9.0.1]
    - Change GreetString [bug 11710280]

    [19-23.9]
    - Check if we have write access to home directory before creating default folders       Resolves: bz#1579764

    kde-workspace     [4.11-19-13]
    - Sanitise notification HTML       Resolves: bz#1568853

    - Increase cpu buffer size in ksysguard       Resolves: bz#1611762

    kmag     [4.10.5-4]
    - Make border around arrow cursor bright       Resolves: bz#1619362

    virtuoso-opensource     [1:6.1.6-7]
    - Fix URL       Resolves: bz#1583962

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for kde-workspace, kde-settings, kdelibs, kmag, and virtuoso-opensource is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Desktop Environment.

The kde-workspace packages consist of components providing the KDE graphical desktop environment.

Security Fix(es) :

* kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element (CVE-2018-6790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Security Fix(es) :

  - kde-workspace: Missing sanitization of notifications     allows to leak client IP address via IMG element     (CVE-2018-6790)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2141 advisory.

    The K Desktop Environment (KDE) is a graphical desktop environment for the X Window System. The kdelibs     packages include core libraries for the K Desktop Environment.

    The kde-workspace packages consist of components providing the KDE graphical desktop environment.

    Security Fix(es):

    * kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element     (CVE-2018-6790)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201803-09 (KDE Plasma Workspaces: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in KDE Plasma Workspaces.
      Please review the referenced CVE identifiers for details.
  Impact :

    An attacker could execute arbitrary commands via specially crafted thumb       drive&rsquo;s volume labels or obtain sensitive information via specially       crafted notifications.
  Workaround :

    Users should mount removable devices with Dolphin instead of the device       notifier.
    Users should disable notifications.

Fix for CVE-2018-6790 CVE-2018-6791, backport crashfix for xembedsniproxy

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2018-6790 CVE-2018-6791

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for plasma5-workspace fixes security issues and bugs.

The following vulnerabilities were fixed :

  - CVE-2018-6790: Desktop notifications could have been     used to load arbitrary remote images into Plasma,     allowing for client IP discovery (boo#1079429)

  - CVE-2018-6791: A specially crafted file system label may     have allowed execution of arbitrary code (boo#1079751)

The following bugs were fixed :

  - Plasma could freeze with certain notifications     (boo#1013550)

ID	Name	Product	Family	Severity
180838	Oracle Linux 7 : kde-workspace (ELSA-2019-2141)	Nessus	Oracle Linux Local Security Checks	medium
128362	CentOS 7 : kde-settings / kde-workspace / kdelibs / kmag / virtuoso-opensource (CESA-2019:2141)	Nessus	CentOS Local Security Checks	medium
128224	Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	medium
127682	RHEL 7 : kde-workspace (RHSA-2019:2141)	Nessus	Red Hat Local Security Checks	medium
108435	GLSA-201803-09 : KDE Plasma Workspaces: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
106907	Fedora 26 : plasma-workspace (2018-337757e11f)	Nessus	Fedora Local Security Checks	medium
106784	Fedora 27 : plasma-workspace (2018-fa58e0c507)	Nessus	Fedora Local Security Checks	medium
106702	openSUSE Security Update : plasma5-workspace (openSUSE-2018-147)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2018-6790

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium