CVE-2014-8651 Privilege escalation in n/a
Local attackers can gain privileges by exploiting a crafted argument in the KDE Clock policykit helper.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-8651?
CVE-2014-8651 is a high-severity vulnerability in n/a, published on 6 Dec 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
Weakness: CWE-264
Which versions are affected by CVE-2014-8651?
It affects 2 products.
Linux distribution packages (16)
kdebase4-wallpapers SUSE:Linux Enterprise Desktop 11 SP3 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Desktop 11 SP3 | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Desktop 11 SP4 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Desktop 11 SP4 | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Server 11 SP3 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Server 11 SP3 | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Server 11 SP4 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Server 11 SP4 | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | All versions | 4.3.5-0.12.20.1 |
kdebase4-wallpapers SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 4.3.5-0.11.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 4.3.5-0.12.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Software Development Kit 11 SP3 | All versions | 4.3.5-0.12.20.1 |
kdebase4-workspace SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 4.3.5-0.12.20.1 |
Products include Kde Kde-Workspace, Kde Plasma-Desktop.
How do I fix CVE-2014-8651?
Upgrade to a fixed version.
Is CVE-2014-8651 being exploited?
There is no known exploitation of CVE-2014-8651 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qpg7-58m4-m59v, MGASA-2014-0445, MGASA-2014-0480, SUSE-SU-2016:0303-1, UBUNTU-CVE-2014-8651, openSUSE-SU-2024:10328-1.