Published: 07/10/2020 Updated: 31/01/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

In kdeconnect-kde (aka KDE Connect) prior to 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kde kdeconnect
opensuse leap 15.1
opensuse backports sle 15.0
opensuse leap 15.2

Debian Bug report logs - #971736 kdeconnect: CVE-2020-26164 Package: src:kdeconnect; Maintainer for src:kdeconnect is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 6 Oct 2020 06:57:02 UTC Severity: important Tags: security, upstream Foun ...

Several issues have been found in kdeconnect <= 20081 where a remote, unauthenticated attacker on the local network can access sensitive information, crash the daemon or possibly execute arbitrary code via a use-after-free ...

oss-sec mailing list archives   By Date By Thread </form>    Re: kdeconnect: CVE-2020-26164: multiple security issues in kdeconnectd network daemon  <!--X-Head- ...

oss-sec mailing list archives   By Date By Thread </form>    kdeconnect: CVE-2020-26164: multiple security issues in kdeconnectd network daemon  <!--X-Head-of-M ...

CWE-400 https://github.com/KDE/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d https://github.com/KDE/kdeconnect-kde/commit/024e5f23db8d8ad3449714b906b46094baaffb89 https://kdeconnect.kde.org/official/https://github.com/KDE/kdeconnect-kde/commit/542d94a70c56aa386c8d4d793481ce181b0422e8 https://github.com/KDE/kdeconnect-kde/commit/613899be24b6e2a6b3e5cc719efce8ae8a122991 https://bugzilla.suse.com/show_bug.cgi?id=1176268 https://github.com/KDE/kdeconnect-kde/commit/4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7 https://lists.opensuse.org/opensuse-security-announce/2020-10/msg00014.html https://github.com/KDE/kdeconnect-kde/releases https://github.com/KDE/kdeconnect-kde/commit/ce0f00fc2d3eccb51d0af4eba61a4f60de086a59 https://kde.org/info/security/advisory-20201002-1.txt http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00018.html http://www.openwall.com/lists/oss-security/2020/10/13/4 http://www.openwall.com/lists/oss-security/2020/10/13/5 http://www.openwall.com/lists/oss-security/2020/10/14/1 http://www.openwall.com/lists/oss-security/2020/11/30/1 https://security.gentoo.org/glsa/202101-16 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971736 https://nvd.nist.gov https://security.archlinux.org/CVE-2020-26164

CVE-2020-26164

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect