CVE-2018-6790 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-6790 Interim 1 13 2024-06-13T01:09:56Z current 2021-05-30T14:10:51Z 2024-06-13T01:09:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-6790 An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BT2QPNOSYGV4PRT6334ZOQQEDV2F6DFL/#BT2QPNOSYGV4PRT6334ZOQQEDV2F6DFL E-Mail link for openSUSE-SU-2018:0397-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O3VUSIEN5D322MWR2YA7OFCLYROIOPRV/#O3VUSIEN5D322MWR2YA7OFCLYROIOPRV E-Mail link for openSUSE-SU-2018:0398-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Liberty Linux 7 LTSS SUSE Package Hub 12 SP3 drkonqi5-5.8.7-8.1 kcm_colors-4.11.19-13.el7 kde-settings-19-23.9.el7 kde-settings-ksplash-19-23.9.el7 kde-settings-minimal-19-23.9.el7 kde-settings-plasma-19-23.9.el7 kde-settings-pulseaudio-19-23.9.el7 kde-style-oxygen-4.11.19-13.el7 kde-workspace-4.11.19-13.el7 kde-workspace-devel-4.11.19-13.el7 kde-workspace-ksplash-themes-4.11.19-13.el7 kde-workspace-libs-4.11.19-13.el7 kdeclassic-cursor-theme-4.11.19-13.el7 kdelibs-4.14.8-10.el7 kdelibs-apidocs-4.14.8-10.el7 kdelibs-common-4.14.8-10.el7 kdelibs-devel-4.14.8-10.el7 kdelibs-ktexteditor-4.14.8-10.el7 kgreeter-plugins-4.11.19-13.el7 khotkeys-4.11.19-13.el7 khotkeys-libs-4.11.19-13.el7 kinfocenter-4.11.19-13.el7 kmag-4.10.5-4.el7 kmenuedit-4.11.19-13.el7 ksysguard-4.11.19-13.el7 ksysguard-libs-4.11.19-13.el7 ksysguardd-4.11.19-13.el7 kwin-4.11.19-13.el7 kwin-gles-4.11.19-13.el7 kwin-gles-libs-4.11.19-13.el7 kwin-libs-4.11.19-13.el7 libkworkspace-4.11.19-13.el7 oxygen-cursor-themes-4.11.19-13.el7 plasma-scriptengine-python-4.11.19-13.el7 plasma-scriptengine-ruby-4.11.19-13.el7 plasma5-workspace-5.8.7-8.1 plasma5-workspace-devel-5.8.7-8.1 plasma5-workspace-lang-5.8.7-8.1 plasma5-workspace-libs-5.8.7-8.1 qt-settings-19-23.9.el7 virtuoso-opensource-6.1.6-7.el7 virtuoso-opensource-utils-6.1.6-7.el7 kcm_colors-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kde-settings-19-23.9.el7 as a component of SUSE Liberty Linux 7 kde-settings-ksplash-19-23.9.el7 as a component of SUSE Liberty Linux 7 kde-settings-minimal-19-23.9.el7 as a component of SUSE Liberty Linux 7 kde-settings-plasma-19-23.9.el7 as a component of SUSE Liberty Linux 7 kde-settings-pulseaudio-19-23.9.el7 as a component of SUSE Liberty Linux 7 kde-style-oxygen-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kde-workspace-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kde-workspace-devel-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kde-workspace-ksplash-themes-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kde-workspace-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kdeclassic-cursor-theme-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kdelibs-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 kdelibs-apidocs-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 kdelibs-common-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 kdelibs-devel-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 kdelibs-ktexteditor-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 kgreeter-plugins-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 khotkeys-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 khotkeys-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kinfocenter-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kmag-4.10.5-4.el7 as a component of SUSE Liberty Linux 7 kmenuedit-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 ksysguard-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 ksysguard-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 ksysguardd-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kwin-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kwin-gles-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kwin-gles-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 kwin-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 libkworkspace-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 oxygen-cursor-themes-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 plasma-scriptengine-python-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 plasma-scriptengine-ruby-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 qt-settings-19-23.9.el7 as a component of SUSE Liberty Linux 7 virtuoso-opensource-6.1.6-7.el7 as a component of SUSE Liberty Linux 7 virtuoso-opensource-utils-6.1.6-7.el7 as a component of SUSE Liberty Linux 7 kcm_colors-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kde-settings-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS kde-settings-ksplash-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS kde-settings-minimal-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS kde-settings-plasma-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS kde-settings-pulseaudio-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS kde-style-oxygen-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kde-workspace-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kde-workspace-devel-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kde-workspace-ksplash-themes-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kde-workspace-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kdeclassic-cursor-theme-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kdelibs-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 LTSS kdelibs-apidocs-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 LTSS kdelibs-common-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 LTSS kdelibs-devel-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 LTSS kdelibs-ktexteditor-4.14.8-10.el7 as a component of SUSE Liberty Linux 7 LTSS kgreeter-plugins-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS khotkeys-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS khotkeys-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kinfocenter-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kmag-4.10.5-4.el7 as a component of SUSE Liberty Linux 7 LTSS kmenuedit-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS ksysguard-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS ksysguard-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS ksysguardd-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kwin-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kwin-gles-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kwin-gles-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS kwin-libs-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS libkworkspace-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS oxygen-cursor-themes-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS plasma-scriptengine-python-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS plasma-scriptengine-ruby-4.11.19-13.el7 as a component of SUSE Liberty Linux 7 LTSS qt-settings-19-23.9.el7 as a component of SUSE Liberty Linux 7 LTSS virtuoso-opensource-6.1.6-7.el7 as a component of SUSE Liberty Linux 7 LTSS virtuoso-opensource-utils-6.1.6-7.el7 as a component of SUSE Liberty Linux 7 LTSS drkonqi5-5.8.7-8.1 as a component of SUSE Package Hub 12 SP3 plasma5-workspace-5.8.7-8.1 as a component of SUSE Package Hub 12 SP3 plasma5-workspace-devel-5.8.7-8.1 as a component of SUSE Package Hub 12 SP3 plasma5-workspace-lang-5.8.7-8.1 as a component of SUSE Package Hub 12 SP3 plasma5-workspace-libs-5.8.7-8.1 as a component of SUSE Package Hub 12 SP3 An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element. CVE-2018-6790 SUSE Liberty Linux 7:kcm_colors-4.11.19-13.el7 SUSE Liberty Linux 7:kde-settings-19-23.9.el7 SUSE Liberty Linux 7:kde-settings-ksplash-19-23.9.el7 SUSE Liberty Linux 7:kde-settings-minimal-19-23.9.el7 SUSE Liberty Linux 7:kde-settings-plasma-19-23.9.el7 SUSE Liberty Linux 7:kde-settings-pulseaudio-19-23.9.el7 SUSE Liberty Linux 7:kde-style-oxygen-4.11.19-13.el7 SUSE Liberty Linux 7:kde-workspace-4.11.19-13.el7 SUSE Liberty Linux 7:kde-workspace-devel-4.11.19-13.el7 SUSE Liberty Linux 7:kde-workspace-ksplash-themes-4.11.19-13.el7 SUSE Liberty Linux 7:kde-workspace-libs-4.11.19-13.el7 SUSE Liberty Linux 7:kdeclassic-cursor-theme-4.11.19-13.el7 SUSE Liberty Linux 7:kdelibs-4.14.8-10.el7 SUSE Liberty Linux 7:kdelibs-apidocs-4.14.8-10.el7 SUSE Liberty Linux 7:kdelibs-common-4.14.8-10.el7 SUSE Liberty Linux 7:kdelibs-devel-4.14.8-10.el7 SUSE Liberty Linux 7:kdelibs-ktexteditor-4.14.8-10.el7 SUSE Liberty Linux 7:kgreeter-plugins-4.11.19-13.el7 SUSE Liberty Linux 7:khotkeys-4.11.19-13.el7 SUSE Liberty Linux 7:khotkeys-libs-4.11.19-13.el7 SUSE Liberty Linux 7:kinfocenter-4.11.19-13.el7 SUSE Liberty Linux 7:kmag-4.10.5-4.el7 SUSE Liberty Linux 7:kmenuedit-4.11.19-13.el7 SUSE Liberty Linux 7:ksysguard-4.11.19-13.el7 SUSE Liberty Linux 7:ksysguard-libs-4.11.19-13.el7 SUSE Liberty Linux 7:ksysguardd-4.11.19-13.el7 SUSE Liberty Linux 7:kwin-4.11.19-13.el7 SUSE Liberty Linux 7:kwin-gles-4.11.19-13.el7 SUSE Liberty Linux 7:kwin-gles-libs-4.11.19-13.el7 SUSE Liberty Linux 7:kwin-libs-4.11.19-13.el7 SUSE Liberty Linux 7:libkworkspace-4.11.19-13.el7 SUSE Liberty Linux 7:oxygen-cursor-themes-4.11.19-13.el7 SUSE Liberty Linux 7:plasma-scriptengine-python-4.11.19-13.el7 SUSE Liberty Linux 7:plasma-scriptengine-ruby-4.11.19-13.el7 SUSE Liberty Linux 7:qt-settings-19-23.9.el7 SUSE Liberty Linux 7:virtuoso-opensource-6.1.6-7.el7 SUSE Liberty Linux 7:virtuoso-opensource-utils-6.1.6-7.el7 SUSE Liberty Linux 7 LTSS:kcm_colors-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kde-settings-19-23.9.el7 SUSE Liberty Linux 7 LTSS:kde-settings-ksplash-19-23.9.el7 SUSE Liberty Linux 7 LTSS:kde-settings-minimal-19-23.9.el7 SUSE Liberty Linux 7 LTSS:kde-settings-plasma-19-23.9.el7 SUSE Liberty Linux 7 LTSS:kde-settings-pulseaudio-19-23.9.el7 SUSE Liberty Linux 7 LTSS:kde-style-oxygen-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kde-workspace-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kde-workspace-devel-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kde-workspace-ksplash-themes-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kde-workspace-libs-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kdeclassic-cursor-theme-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kdelibs-4.14.8-10.el7 SUSE Liberty Linux 7 LTSS:kdelibs-apidocs-4.14.8-10.el7 SUSE Liberty Linux 7 LTSS:kdelibs-common-4.14.8-10.el7 SUSE Liberty Linux 7 LTSS:kdelibs-devel-4.14.8-10.el7 SUSE Liberty Linux 7 LTSS:kdelibs-ktexteditor-4.14.8-10.el7 SUSE Liberty Linux 7 LTSS:kgreeter-plugins-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:khotkeys-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:khotkeys-libs-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kinfocenter-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kmag-4.10.5-4.el7 SUSE Liberty Linux 7 LTSS:kmenuedit-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:ksysguard-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:ksysguard-libs-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:ksysguardd-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kwin-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kwin-gles-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kwin-gles-libs-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:kwin-libs-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:libkworkspace-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:oxygen-cursor-themes-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:plasma-scriptengine-python-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:plasma-scriptengine-ruby-4.11.19-13.el7 SUSE Liberty Linux 7 LTSS:qt-settings-19-23.9.el7 SUSE Liberty Linux 7 LTSS:virtuoso-opensource-6.1.6-7.el7 SUSE Liberty Linux 7 LTSS:virtuoso-opensource-utils-6.1.6-7.el7 SUSE Package Hub 12 SP3:drkonqi5-5.8.7-8.1 SUSE Package Hub 12 SP3:plasma5-workspace-5.8.7-8.1 SUSE Package Hub 12 SP3:plasma5-workspace-devel-5.8.7-8.1 SUSE Package Hub 12 SP3:plasma5-workspace-lang-5.8.7-8.1 SUSE Package Hub 12 SP3:plasma5-workspace-libs-5.8.7-8.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N