CVE-2019-7443 Privilege escalation in n/a

High 8.1 Published 7 May 2019 Updated 4 Aug 2024

KDE KAuth allows arbitrary plugin code execution as root via DBus, enabling privilege escalation for attackers exploiting plugin vulnerabilities.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2019-7443?

CVE-2019-7443 is a high-severity vulnerability in Fedoraproject Fedora, published on 7 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability.

Weakness: CWE-20

Which versions are affected by CVE-2019-7443?

It affects 4 products.

Linux distribution packages (26)

`extra-cmake-modules` SUSE:Package Hub 12 SP1	All versions	`5.32.0-7.2`
`kauth` SUSE:Package Hub 12 SP1	All versions	`5.45.0-bp150.5.2`
`kcoreaddons` SUSE:Package Hub 12 SP1	All versions	`5.45.0-bp150.3.6.2`
`polkit-qt5-1` SUSE:Package Hub 12 SP1	All versions	`0.112.0-5.2`
`extra-cmake-modules` SUSE:Package Hub 12 SP2	All versions	`5.32.0-7.2`
`kauth` SUSE:Package Hub 12 SP2	All versions	`5.45.0-bp150.5.2`
`kcoreaddons` SUSE:Package Hub 12 SP2	All versions	`5.45.0-bp150.3.6.2`
`polkit-qt5-1` SUSE:Package Hub 12 SP2	All versions	`0.112.0-5.2`
`extra-cmake-modules` SUSE:Package Hub 12 SP3	All versions	`5.32.0-7.2`
`kauth` SUSE:Package Hub 12 SP3	All versions	`5.45.0-bp150.5.2`
`kcoreaddons` SUSE:Package Hub 12 SP3	All versions	`5.45.0-bp150.3.6.2`
`polkit-qt5-1` SUSE:Package Hub 12 SP3	All versions	`0.112.0-5.2`
`extra-cmake-modules` SUSE:Package Hub 15	All versions	`5.32.0-7.2`
`kauth` SUSE:Package Hub 15	All versions	`5.32.0-bp150.3.10.1`
`kauth` SUSE:Package Hub 15	All versions	`5.45.0-bp150.3.6.1`
`kauth` SUSE:Package Hub 15	All versions	`5.45.0-bp150.5.2`
`kauth` SUSE:Package Hub 15	All versions	`5.45.0-bp150.8.2`
`kcoreaddons` SUSE:Package Hub 15	All versions	`5.32.0-bp150.3.3.1`
`kcoreaddons` SUSE:Package Hub 15	All versions	`5.45.0-bp150.3.6.2`
`polkit-qt5-1` SUSE:Package Hub 15	All versions	`0.112.0-5.2`
`polkit-qt5-1` SUSE:Package Hub 15	All versions	`0.112.0-bp150.3.3.1`
`polkit-qt5-1` SUSE:Package Hub 15	All versions	`0.112.0-bp150.3.6.1`
`extra-cmake-modules` openSUSE:Leap 15.0	All versions	`5.32.0-7.2`
`kauth` openSUSE:Leap 15.0	All versions	`5.45.0-bp150.5.2`
`kcoreaddons` openSUSE:Leap 15.0	All versions	`5.45.0-bp150.3.6.2`
`polkit-qt5-1` openSUSE:Leap 15.0	All versions	`0.112.0-5.2`

Products include Fedoraproject Fedora, Kde Kauth, Opensuse Backports, Opensuse Leap.

How do I fix CVE-2019-7443?

Upgrade to a fixed version.

Is CVE-2019-7443 being exploited?

There is no known exploitation of CVE-2019-7443 in the wild and no public exploit code.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as DEBIAN-CVE-2019-7443, GHSA-wmpm-pm59-7mfw, UBUNTU-CVE-2019-7443, USN-6035-1, openSUSE-SU-2019:0242-1, openSUSE-SU-2019:0247-1 and 2 more.