Vulnerability Description
An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kde | Ktexteditor | >= 5.34.0, <= 5.45.0 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2018/04/24/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2019/07/09/3
- https://bugzilla.suse.com/show_bug.cgi?id=1033055Issue TrackingThird Party Advisory
- http://www.openwall.com/lists/oss-security/2018/04/24/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2019/07/09/3
- https://bugzilla.suse.com/show_bug.cgi?id=1033055Issue TrackingThird Party Advisory
FAQ
What is CVE-2018-10361?
CVE-2018-10361 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow...
How severe is CVE-2018-10361?
CVE-2018-10361 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-10361?
Check the references section above for vendor advisories and patch information. Affected products include: Kde Ktexteditor.