CVE-2016-7787 — Code Injection in Kde-cli-tools
Severity
4.9MEDIUMNVD
EPSS
0.5%
top 32.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 23
Latest updateMay 14
Description
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NExploitability: 1.2 | Impact: 3.6
Affected Packages3 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-2rvv-92pm-m5p9: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user↗2022-05-14
OSV▶
CVE-2016-7787: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user↗2016-12-23
📋Vendor Advisories
1Debian▶
CVE-2016-7787: kde-cli-tools - A maliciously crafted command line for kdesu can result in the user only seeing ...↗2016
💬Community
3Bugzilla▶
CVE-2016-7787 kf5-kdesu: Improper handling of unicode string terminator in kdesu invocation [epel-7]↗2016-09-29
Bugzilla▶
CVE-2016-7787 kde-cli-tools: Improper handling of unicode string terminator in kdesu invocation↗2016-09-29
Bugzilla▶
CVE-2016-7787 kde-cli-tools: Improper handling of unicode string terminator in kdesu invocation [fedora-all]↗2016-09-29