CVE-2013-4132: Kde Kde-Workspace

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via (1) an invalid salt or a (2) DES or (3) MD5 encrypted password, when FIPS-140 is enable, to KDM or an (4) invalid password to KCheckPass.

Affected products

• Kde Kde-Workspace: up to and including 4.10.5
• Kde Kde Sc: up to and including 4.10.5
• Opensuse Opensuse: version 12.2 only

Published 2013-09-16. Last modified 2026-06-16.