Search for packages
Package details: pkg:deb/debian/kconfig@5.28.0-2%2Bdeb9u1
purl pkg:deb/debian/kconfig@5.28.0-2%2Bdeb9u1
Next non-vulnerable version 5.78.0-4
Latest non-vulnerable version 5.78.0-4
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ezms-uxg1-aaar
Aliases:
CVE-2019-14744
In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
5.54.0-1+deb10u1
Affected by 1 other vulnerability.
5.78.0-4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T15:21:29.263013+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-20T21:59:34.778096+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.1.3
2025-06-08T08:15:43.585756+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T15:23:06.046127+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.1.0
2025-04-12T20:06:30.145549+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T06:47:19.953750+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T13:54:26.409064+00:00 Debian Oval Importer Affected by VCID-ezms-uxg1-aaar None 36.0.0