Debian/kio-extras: high 7.5
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
Action: Upgrade kio-extras to 4:18.08.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4:18.08.3-1 | - |
Fixed versions
| 4:18.08.3-1 |
Sources
- osv: DEBIAN-CVE-2018-19120#Debian:13/kio-extras
- https://security-tracker.debian.org/tracker/CVE-2018-19120
published · modified · JSON