Search for packages
Package details: pkg:deb/debian/kde4libs@4:4.14.26-2
purl pkg:deb/debian/kde4libs@4:4.14.26-2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-9243-ckwg-aaap kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file. CVE-2017-6410
VCID-het3-uz92-aaah Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads. CVE-2016-6232
VCID-yg6r-axzc-aaar KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app. CVE-2017-8422

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T15:29:21.952069+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:49:35.007358+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:45:43.844164+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-20T22:16:55.071542+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap None 36.1.3
2025-06-20T22:09:55.156279+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah None 36.1.3
2025-06-20T21:50:33.986323+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar None 36.1.3
2025-06-08T08:23:54.477691+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:42:57.936378+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:00:48.672617+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T15:40:57.219200+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap None 36.1.0
2025-06-07T15:33:57.150554+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah None 36.1.0
2025-06-07T15:13:46.076110+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar None 36.1.0
2025-04-08T06:55:16.332327+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:15:26.805041+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:31:44.202568+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T14:11:50.114790+00:00 Debian Oval Importer Fixing VCID-9243-ckwg-aaap None 36.0.0
2025-04-07T14:04:53.018058+00:00 Debian Oval Importer Fixing VCID-het3-uz92-aaah None 36.0.0
2025-04-07T13:45:24.745638+00:00 Debian Oval Importer Fixing VCID-yg6r-axzc-aaar None 36.0.0