CVE-2014-8651: kde kde-workspace

CVSS: 7.2v2.0HighModified

AliasesMGASA-2014-0445MGASA-2014-0480SUSE-SU-2016:0303-1+1 more

Published 06-12-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-8651 is a high (CVSS 7.2) vulnerability in kde kde-workspace. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.4% of scored vulnerabilities.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

0.39%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

06-12-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

0.39%

Chance of exploitation in the next 30 days

Percentile

31%

Versus all other CVEs

30-day change

0.00 pp

From 0.39% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Suse16 products

kdebase4-wallpapers&distro=SUSE Linux Enterprise Desktop 11 SP3< 4.3.5-0.11.20.1
kdebase4-wallpapers&distro=SUSE Linux Enterprise Desktop 11 SP4< 4.3.5-0.11.20.1
kdebase4-wallpapers&distro=SUSE Linux Enterprise Server 11 SP3< 4.3.5-0.11.20.1
kdebase4-wallpapers&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 4.3.5-0.11.20.1
kdebase4-wallpapers&distro=SUSE Linux Enterprise Server 11 SP4< 4.3.5-0.11.20.1

Show all 16

Kde2 products

kde-workspace≤ 4.11.13
plasma-desktop≤ 5.1

Mageia2 products

kdebase4-workspace< 4.10.5-1.2.mga3
kdebase4-workspace< 4.11.14-1.mga4

Ubuntu1 product

kde-workspace< 4:4.11.11-0ubuntu0.2

4 vendors · 21 products

References

27 links

lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.htmlVendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2014/11/04/9Mailing ListX Refsource MLIST
security.gentoo.org/glsa/201512-12Vendor AdvisoryX Refsource GENTOO
www.kde.org/info/security/advisory-20141106-1.txtX Refsource CONFIRMVendor AdvisoryAdvisoryREPORT
www.ubuntu.com/usn/USN-2402-1Vendor AdvisoryX Refsource UBUNTU
lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.htmlVendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2014/11/07/3Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/70904VDB EntryX Refsource BID
advisories.mageia.org/MGASA-2014-0445.htmlAdvisory

Show all 27 references

bugs.mageia.org/show_bug.cgi?id=14487REPORT
bugs.mageia.org/show_bug.cgi?id=3310REPORT
bugs.mageia.org/show_bug.cgi?id=9086REPORT
bugs.mageia.org/show_bug.cgi?id=11050REPORT
advisories.mageia.org/MGASA-2014-0480.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=14578REPORT
bugs.kde.org/show_bug.cgi?id=127861REPORT
bugs.kde.org/show_bug.cgi?id=337433REPORT
bugs.kde.org/show_bug.cgi?id=338883REPORT
www.suse.com/support/update/announcement/2016/suse-su-20160303-1/Advisory
bugzilla.suse.com/904625REPORT
bugzilla.suse.com/929718REPORT
www.suse.com/security/cve/CVE-2014-8651WEB
ubuntu.com/security/CVE-2014-8651REPORT
git.reviewboard.kde.org/r/120977/REPORT
ubuntu.com/security/notices/USN-2402-1Advisory
www.cve.org/CVERecord?id=CVE-2014-8651REPORT

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities