Search for packages
Package details: pkg:deb/ubuntu/kio@5.15.0-0ubuntu2
purl pkg:deb/ubuntu/kio@5.15.0-0ubuntu2
Next non-vulnerable version 5.18.0-0ubuntu1.1
Latest non-vulnerable version 5.18.0-0ubuntu1.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-9243-ckwg-aaap
Aliases:
CVE-2017-6410
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string, or PATH_INFO), which allows remote attackers to obtain sensitive information via a crafted PAC file.
5.18.0-0ubuntu1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version