CVE-2017-8422: kde kauth Authentication Bypass by Spoofing
CVSS: 7.8v3.0HighModified
AliasesMGASA-2017-0274SUSE-SU-2017:1335-1openSUSE-SU-2017:1254-1openSUSE-SU-2017:1272-1RHSA-2017:1264UBUNTU-CVE-2017-8422USN-3286-1DEBIAN-CVE-2017-8422
Published 17-05-2017Last modified 05-08-2024
Vulnerability summary
CVE-2017-8422 is a high (CVSS 7.8) Authentication Bypass by Spoofing vulnerability in kde kauth. EPSS estimates a 1.80% chance of exploitation in the next 30 days, higher than 78.2% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.8/10
010
High · v3.0 (NVD)EPSS score
1.80%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 17-05-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
1.80%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.80% on 18-09-2026
18-09-202618-10-2026
EPSS score1.80%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundKDE 4/5 - 'KAuth' Local Privilege Escalation
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse13 products
- kauth&distro=SUSE Package Hub 12 SP1< 5.26.0-6.1
- kauth&distro=SUSE Package Hub 12 SP2< 5.26.0-6.1
- kdelibs4-apidocs&distro=SUSE Package Hub 12 SP1< 4.14.25-8.2
- kdelibs4-apidocs&distro=SUSE Package Hub 12 SP2< 4.14.25-8.2
- kdelibs4&distro=SUSE Linux Enterprise Desktop 12 SP1< 4.12.0-10.1
Redhat6 products
- kdelibs< 6:4.14.8-6.el7_3
- kdelibs-apidocs< 6:4.14.8-6.el7_3
- kdelibs-common< 6:4.14.8-6.el7_3
- kdelibs-debuginfo< 6:4.14.8-6.el7_3
- kdelibs-devel< 6:4.14.8-6.el7_3
Mageia2 products
- kauth< 5.5.0-1.1.mga5
- kdelibs4< 4.14.30-1.1.mga5
Ubuntu2 products
- kauth< 5.18.0-0ubuntu2
- kde4libs< 4:4.14.16-0ubuntu3.2 | < 4:4.13.3-0ubuntu0.5
Debian1 product
- kauth< 5.28.0-2
6 vendors · 26 products
References
28 links- www.kde.org/info/security/advisory-20170510-1.txtX Refsource CONFIRMPatchVendor AdvisoryAdvisoryARTICLEREPORT
- cgit.kde.org/kdelibs.git/commit/?id=264e97625abe2e0334f97de17f6ffb52582888abX Refsource CONFIRMPatch
- www.openwall.com/lists/oss-security/2017/05/10/3Mailing ListX Refsource MLISTThird Party AdvisoryVDB EntryREPORT
Show all 28 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory
