[manjaro-security] [ASA-202010-7] kdeconnect: arbitrary code execution
foxboron at archlinux.org
Wed Oct 21 09:06:05 CEST 2020
Arch Linux Security Advisory ASA-202010-7
Date : 2020-10-18
CVE-ID : CVE-2020-26164
Package : kdeconnect
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-1241
The package kdeconnect before version 20.08.2-1 is vulnerable to
arbitrary code execution.
Upgrade to 20.08.2-1.
# pacman -Syu "kdeconnect>=20.08.2-1"
The problem has been fixed upstream in version 20.08.2.
Several issues have been found in kdeconnect <= 20.08.1 where a remote,
unauthenticated attacker on the local network can access sensitive
information, crash the daemon or possibly execute arbitrary code via a
A remote unauthenticated attacker on the local network can access
sensitive information, crash the daemon or possible execute arbitrary
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the manjaro-security