CVE-2014-8651

Published: Dec 6, 2014Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.

Affected (2)

Products: Kde: Plasma Desktop, Kde Workspace

Kde

2 products

Plasma Desktop

Kde Workspace

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kde Plasma Desktop	Up to 5.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Kde Kde Workspace	Up to 4.11.13

Related CWEs

CWE-264

References (18)

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144093.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/11/04/9

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/11/07/3

Source: cve@mitre.org

http://www.securityfocus.com/bid/70904

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2402-1

Source: cve@mitre.org

https://security.gentoo.org/glsa/201512-12

Source: cve@mitre.org

https://www.kde.org/info/security/advisory-20141106-1.txt

Source: cve@mitre.org

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143781.html