The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.

The remote host is affected by the vulnerability described in GLSA-202401-21 (KTextEditor: Arbitrary Local Code Execution)

  - The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries     to execute the associated LSP server binary when opening a file of a given type. If this binary is absent     from the PATH, it will try running the LSP server binary in the directory of the file that was just opened     (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted     directory. (CVE-2022-23853)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0841-1 advisory.

  - The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries     to execute the associated LSP server binary when opening a file of a given type. If this binary is absent     from the PATH, it will try running the LSP server binary in the directory of the file that was just opened     (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted     directory. (CVE-2022-23853)

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0841-1 advisory.

  - The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries     to execute the associated LSP server binary when opening a file of a given type. If this binary is absent     from the PATH, it will try running the LSP server binary in the directory of the file that was just opened     (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted     directory. (CVE-2022-23853)

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
188050	GLSA-202401-21 : KTextEditor: Arbitrary Local Code Execution	Nessus	Gentoo Local Security Checks	high
159042	openSUSE 15 Security Update : libqt5-qtbase (openSUSE-SU-2022:0841-1)	Nessus	SuSE Local Security Checks	high
158957	SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2022:0841-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-23853

high

Tenable Plugins

high

high

high