Lucene search

K
cve[email protected]CVE-2014-8651
HistoryDec 06, 2014 - 9:59 p.m.

CVE-2014-8651

2014-12-0621:59:00
CWE-264
web.nvd.nist.gov
31
cve-2014-8651
kde
clock
kcm
policykit
local users
privileges
ntputility
ntp utility name

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.

Affected configurations

NVD
Node
kdeplasma-desktopRange5.1
Node
kdekde-workspaceRange4.11.13

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%