CVE-2018-10361

An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauthktexteditorhelper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation.

References

Affected packages

Git / github.com/kde/ktexteditor

Affected ranges

Type

GIT

Repo

https://github.com/kde/ktexteditor

Events

Introduced

e2e7285a75267dfe29d4200427893b3dcd638b53

Last affected

4f679d8b45ecfc740da6b93c738be21c1c9d46b4

Database specific

{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:kde:ktexteditor:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.34.0"
        },
        {
            "last_affected": "5.45.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10361.json"