CVE-2014-3494: Kde Kdelibs

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.

Affected products

• Kde Kdelibs: version 4.10.97 only; version 4.11.0 only; version 4.11.1 only; version 4.11.2 only; version 4.11.3 only; version 4.11.4 only; …
• Opensuse Opensuse: version 13.1 only

Published 2014-07-01. Last modified 2026-06-17.