Red Hat Kdelibs vulnerabilities

3 CVEs affecting Red Hat Kdelibs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1094, published 2011-03-16.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4811, published 2006-10-18. Medium severity, CVSS 6.8. EPSS: 4.5% chance of exploitation in the next 30 days. Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a…
• CVE-2003-0459, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal…
• CVE-2011-1094, published 2011-03-16. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows…