Kde Kde-Workspace vulnerabilities

4 CVEs affecting Kde Kde-Workspace, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4133, published 2019-12-10.

More from Kde.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4133, published 2019-12-10. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. kde-workspace before 4.10.5 has a memory leak in plasma desktop
• CVE-2013-4132, published 2013-09-16. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer…
• CVE-2015-1308, published 2015-01-26. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is…
• CVE-2014-8651, published 2014-12-06. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.