CVE-2020-26164

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-26164
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26164.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-26164
Downstream
DEBIAN (1)
MGASA (1)
openSUSE (4)
UBUNTU (1)
Related
openSUSE (4)
Published
2020-10-07T19:15:12Z
Modified
2026-10-20T14:05:19Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*",
                "cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "15.0-sp1"
                        },
                        {
                            "last_affected":  "15.0-sp1"
                        },
                        {
                            "introduced":  "15.0-sp2"
                        },
                        {
                            "last_affected":  "15.0-sp2"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "opensuse:backports_sle"
        },
        {
            "cpes":  [
                "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "15.1"
                        },
                        {
                            "last_affected":  "15.1"
                        },
                        {
                            "introduced":  "15.2"
                        },
                        {
                            "last_affected":  "15.2"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "opensuse:leap"
        }
    ]
}
References

Affected packages

Git / github.com/kde/kdeconnect-kde

Affected ranges

Type
GIT
Repo
https://github.com/kde/kdeconnect-kde
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c58c37ac52120620b3e0cc65047ef4f6e2bedd39
Fixed
024e5f23db8d8ad3449714b906b46094baaffb89
Fixed
4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7
Fixed
542d94a70c56aa386c8d4d793481ce181b0422e8
Fixed
613899be24b6e2a6b3e5cc719efce8ae8a122991
Fixed
8112729eb0f13e6947984416118531078e65580d
Fixed
ce0f00fc2d3eccb51d0af4eba61a4f60de086a59
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:kde:kdeconnect:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "20.08.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "024e5f23db8d8ad3449714b906b46094baaffb89"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "542d94a70c56aa386c8d4d793481ce181b0422e8"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "613899be24b6e2a6b3e5cc719efce8ae8a122991"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "8112729eb0f13e6947984416118531078e65580d"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "ce0f00fc2d3eccb51d0af4eba61a4f60de086a59"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v0.*
v0.3
v0.4.1
v0.4.2
v0.7
v0.7.1
v0.7.2
v0.7.3
v0.8
v1.*
v1.0
v1.0.1
v1.2.1
v1.4
v20.*
v20.07.80
v20.07.90
v20.08.0
v20.08.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26164.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "169212465212062186964461074275237693488",
            "length":  1761
        },
        "id":  "CVE-2020-26164-3385ada3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/ce0f00fc2d3eccb51d0af4eba61a4f60de086a59",
        "target":  {
            "file":  "core/backends/lan/lanlinkprovider.cpp",
            "function":  "LanLinkProvider::udpBroadcastReceived"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "48391377195153993740618960876568243315",
                "175776086243571528490916560372142461340",
                "36039830265806614933615408264073893033",
                "328759303061142755284674770696617996460"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-26164-6b431369",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7",
        "target":  {
            "file":  "core/backends/lan/lanlinkprovider.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "247696741698703836114735315291771006445",
            "length":  1853
        },
        "id":  "CVE-2020-26164-9e0c12a5",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7",
        "target":  {
            "file":  "core/backends/lan/lanlinkprovider.cpp",
            "function":  "LanLinkProvider::dataReceived"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "316889281405375350310193983773602935182",
            "length":  642
        },
        "id":  "CVE-2020-26164-9e93d7ed",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d",
        "target":  {
            "file":  "tests/testsocketlinereader.cpp",
            "function":  "TestSocketLineReader::initTestCase"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "236215070137632193616889321865338985983",
                "9912877670252894786996957519289716466",
                "47758015272208239110808328796153533659",
                "31873889898361168339373623759442609441"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-26164-a00c80f2",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/ce0f00fc2d3eccb51d0af4eba61a4f60de086a59",
        "target":  {
            "file":  "core/backends/lan/lanlinkprovider.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "37149656079090608530127751331248330975",
                "181202881865311568115222253440231673602",
                "159624639647573573099601097656073541549",
                "331664854571936428538130908373581592578",
                "195584099322918536794609401174306318017",
                "324339754007837311205698310556549556206",
                "27084404015237821391639525558259575314",
                "36707405996746581606175894250955624998",
                "16527501792903214545899002808025429120",
                "297748893527612132684804122992360649646"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-26164-a0cac0d4",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/613899be24b6e2a6b3e5cc719efce8ae8a122991",
        "target":  {
            "file":  "core/backends/lan/lanlinkprovider.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "185096836021021651473962586013816727356",
            "length":  384
        },
        "id":  "CVE-2020-26164-d26f9b6d",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d",
        "target":  {
            "file":  "core/backends/lan/socketlinereader.cpp",
            "function":  "SocketLineReader::dataReceived"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "214375864970925315496221467048634536281",
                "21505395291300523390011035752460987586",
                "262050446054780186080642476439100955917",
                "154630449354378175085154369511824430502",
                "57803463555813799190350710010840276254",
                "176894328179205294973233926257086177384",
                "147674783205895176419587583286236789680",
                "61880892699506569551189058860269847333",
                "19289750718046908666807396725824177804",
                "113160262217869567472765252585728076443",
                "36673354780080396195720850853615712593",
                "97153726869967445041311856074591386790",
                "143436331158208318057408793869520833636",
                "95716145602602555041533604931804175781",
                "310000559364219985387758388769933862318",
                "223826035622294870523897697277028166674",
                "25944266041702818348449265369788869423",
                "265198597580099816829673747934277541792",
                "190532963382171260860784736568901169646",
                "242664381595365844111301315715397603459"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-26164-e43ae852",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d",
        "target":  {
            "file":  "tests/testsocketlinereader.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "290774158358827173243374493883897806488",
                "175206950594264041446392111786975068217",
                "142948776916198467032965063665687846573",
                "13732332071958541691498838638111358814",
                "163806904771138796525180206526153541090",
                "213219602545397880225702211458981037722",
                "88365458939181897690853542674946667547"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-26164-e48fe50e",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/kde/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d",
        "target":  {
            "file":  "core/backends/lan/socketlinereader.cpp"
        }
    }
]
vanir_signatures_modified 
"2026-10-20T14:05:19Z"