CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is "$(touch b)" -- this will create a file called b in the home folder.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.0%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 7.2

References

Products affected by CVE-2018-6791

Kde » Plasma-Workspace » Version: 4.96.0

cpe:2.3:a:kde:plasma-workspace:4.96.0
Kde » Plasma-Workspace » Version: 4.97.0

cpe:2.3:a:kde:plasma-workspace:4.97.0
Kde » Plasma-Workspace » Version: 4.98.0

cpe:2.3:a:kde:plasma-workspace:4.98.0
Kde » Plasma-Workspace » Version: 5.0.0

cpe:2.3:a:kde:plasma-workspace:5.0.0
Kde » Plasma-Workspace » Version: 5.0.1

cpe:2.3:a:kde:plasma-workspace:5.0.1
Kde » Plasma-Workspace » Version: 5.0.2

cpe:2.3:a:kde:plasma-workspace:5.0.2
Kde » Plasma-Workspace » Version: 5.0.95

cpe:2.3:a:kde:plasma-workspace:5.0.95
Kde » Plasma-Workspace » Version: 5.1

cpe:2.3:a:kde:plasma-workspace:5.1
Kde » Plasma-Workspace » Version: 5.1.0

cpe:2.3:a:kde:plasma-workspace:5.1.0
Kde » Plasma-Workspace » Version: 5.1.1

cpe:2.3:a:kde:plasma-workspace:5.1.1
Kde » Plasma-Workspace » Version: 5.1.2

cpe:2.3:a:kde:plasma-workspace:5.1.2
Kde » Plasma-Workspace » Version: 5.1.95

cpe:2.3:a:kde:plasma-workspace:5.1.95
Kde » Plasma-Workspace » Version: 5.10.0

cpe:2.3:a:kde:plasma-workspace:5.10.0
Kde » Plasma-Workspace » Version: 5.10.1

cpe:2.3:a:kde:plasma-workspace:5.10.1
Kde » Plasma-Workspace » Version: 5.10.2

cpe:2.3:a:kde:plasma-workspace:5.10.2
Kde » Plasma-Workspace » Version: 5.10.3

cpe:2.3:a:kde:plasma-workspace:5.10.3
Kde » Plasma-Workspace » Version: 5.10.4

cpe:2.3:a:kde:plasma-workspace:5.10.4
Kde » Plasma-Workspace » Version: 5.10.5

cpe:2.3:a:kde:plasma-workspace:5.10.5
Kde » Plasma-Workspace » Version: 5.10.95

cpe:2.3:a:kde:plasma-workspace:5.10.95
Kde » Plasma-Workspace » Version: 5.11.0

cpe:2.3:a:kde:plasma-workspace:5.11.0
Kde » Plasma-Workspace » Version: 5.11.1

cpe:2.3:a:kde:plasma-workspace:5.11.1
Kde » Plasma-Workspace » Version: 5.11.2

cpe:2.3:a:kde:plasma-workspace:5.11.2
Kde » Plasma-Workspace » Version: 5.11.3

cpe:2.3:a:kde:plasma-workspace:5.11.3
Kde » Plasma-Workspace » Version: 5.11.4

cpe:2.3:a:kde:plasma-workspace:5.11.4
Kde » Plasma-Workspace » Version: 5.11.5

cpe:2.3:a:kde:plasma-workspace:5.11.5
Kde » Plasma-Workspace » Version: 5.11.95

cpe:2.3:a:kde:plasma-workspace:5.11.95
Kde » Plasma-Workspace » Version: 5.2.0

cpe:2.3:a:kde:plasma-workspace:5.2.0
Kde » Plasma-Workspace » Version: 5.2.1

cpe:2.3:a:kde:plasma-workspace:5.2.1
Kde » Plasma-Workspace » Version: 5.2.2

cpe:2.3:a:kde:plasma-workspace:5.2.2
Kde » Plasma-Workspace » Version: 5.2.95

cpe:2.3:a:kde:plasma-workspace:5.2.95
Kde » Plasma-Workspace » Version: 5.3.0

cpe:2.3:a:kde:plasma-workspace:5.3.0
Kde » Plasma-Workspace » Version: 5.3.1

cpe:2.3:a:kde:plasma-workspace:5.3.1
Kde » Plasma-Workspace » Version: 5.3.2

cpe:2.3:a:kde:plasma-workspace:5.3.2
Kde » Plasma-Workspace » Version: 5.3.95

cpe:2.3:a:kde:plasma-workspace:5.3.95
Kde » Plasma-Workspace » Version: 5.4.0

cpe:2.3:a:kde:plasma-workspace:5.4.0
Kde » Plasma-Workspace » Version: 5.4.1

cpe:2.3:a:kde:plasma-workspace:5.4.1
Kde » Plasma-Workspace » Version: 5.4.2

cpe:2.3:a:kde:plasma-workspace:5.4.2
Kde » Plasma-Workspace » Version: 5.4.3

cpe:2.3:a:kde:plasma-workspace:5.4.3
Kde » Plasma-Workspace » Version: 5.4.95

cpe:2.3:a:kde:plasma-workspace:5.4.95
Kde » Plasma-Workspace » Version: 5.5.0

cpe:2.3:a:kde:plasma-workspace:5.5.0
Kde » Plasma-Workspace » Version: 5.5.1

cpe:2.3:a:kde:plasma-workspace:5.5.1
Kde » Plasma-Workspace » Version: 5.5.2

cpe:2.3:a:kde:plasma-workspace:5.5.2
Kde » Plasma-Workspace » Version: 5.5.3

cpe:2.3:a:kde:plasma-workspace:5.5.3
Kde » Plasma-Workspace » Version: 5.5.4

cpe:2.3:a:kde:plasma-workspace:5.5.4
Kde » Plasma-Workspace » Version: 5.5.5

cpe:2.3:a:kde:plasma-workspace:5.5.5
Kde » Plasma-Workspace » Version: 5.5.95

cpe:2.3:a:kde:plasma-workspace:5.5.95
Kde » Plasma-Workspace » Version: 5.6.0

cpe:2.3:a:kde:plasma-workspace:5.6.0
Kde » Plasma-Workspace » Version: 5.6.1

cpe:2.3:a:kde:plasma-workspace:5.6.1
Kde » Plasma-Workspace » Version: 5.6.2

cpe:2.3:a:kde:plasma-workspace:5.6.2
Kde » Plasma-Workspace » Version: 5.6.3

cpe:2.3:a:kde:plasma-workspace:5.6.3
Kde » Plasma-Workspace » Version: 5.6.4

cpe:2.3:a:kde:plasma-workspace:5.6.4
Kde » Plasma-Workspace » Version: 5.6.5

cpe:2.3:a:kde:plasma-workspace:5.6.5
Kde » Plasma-Workspace » Version: 5.6.5.1

cpe:2.3:a:kde:plasma-workspace:5.6.5.1
Kde » Plasma-Workspace » Version: 5.7.0

cpe:2.3:a:kde:plasma-workspace:5.7.0
Kde » Plasma-Workspace » Version: 5.7.1

cpe:2.3:a:kde:plasma-workspace:5.7.1
Kde » Plasma-Workspace » Version: 5.7.2

cpe:2.3:a:kde:plasma-workspace:5.7.2
Kde » Plasma-Workspace » Version: 5.7.3

cpe:2.3:a:kde:plasma-workspace:5.7.3
Kde » Plasma-Workspace » Version: 5.7.4

cpe:2.3:a:kde:plasma-workspace:5.7.4
Kde » Plasma-Workspace » Version: 5.7.5

cpe:2.3:a:kde:plasma-workspace:5.7.5
Kde » Plasma-Workspace » Version: 5.7.95

cpe:2.3:a:kde:plasma-workspace:5.7.95
Kde » Plasma-Workspace » Version: 5.8.0

cpe:2.3:a:kde:plasma-workspace:5.8.0
Kde » Plasma-Workspace » Version: 5.8.1

cpe:2.3:a:kde:plasma-workspace:5.8.1
Kde » Plasma-Workspace » Version: 5.8.2

cpe:2.3:a:kde:plasma-workspace:5.8.2
Kde » Plasma-Workspace » Version: 5.8.3

cpe:2.3:a:kde:plasma-workspace:5.8.3
Kde » Plasma-Workspace » Version: 5.8.4

cpe:2.3:a:kde:plasma-workspace:5.8.4
Kde » Plasma-Workspace » Version: 5.8.5

cpe:2.3:a:kde:plasma-workspace:5.8.5
Kde » Plasma-Workspace » Version: 5.8.6

cpe:2.3:a:kde:plasma-workspace:5.8.6
Kde » Plasma-Workspace » Version: 5.8.7

cpe:2.3:a:kde:plasma-workspace:5.8.7
Kde » Plasma-Workspace » Version: 5.8.8

cpe:2.3:a:kde:plasma-workspace:5.8.8
Kde » Plasma-Workspace » Version: 5.8.9

cpe:2.3:a:kde:plasma-workspace:5.8.9
Kde » Plasma-Workspace » Version: 5.8.95

cpe:2.3:a:kde:plasma-workspace:5.8.95
Kde » Plasma-Workspace » Version: 5.9.0

cpe:2.3:a:kde:plasma-workspace:5.9.0
Kde » Plasma-Workspace » Version: 5.9.1

cpe:2.3:a:kde:plasma-workspace:5.9.1
Kde » Plasma-Workspace » Version: 5.9.2

cpe:2.3:a:kde:plasma-workspace:5.9.2
Kde » Plasma-Workspace » Version: 5.9.3

cpe:2.3:a:kde:plasma-workspace:5.9.3
Kde » Plasma-Workspace » Version: 5.9.4

cpe:2.3:a:kde:plasma-workspace:5.9.4
Kde » Plasma-Workspace » Version: 5.9.5

cpe:2.3:a:kde:plasma-workspace:5.9.5
Kde » Plasma-Workspace » Version: 5.9.95

cpe:2.3:a:kde:plasma-workspace:5.9.95
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6791

Products

Pricing

Contact Us