KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
{
"cpe": "cpe:2.3:a:kde:kauth:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "5.33"
}
],
"source": "CPE_RANGE"
}{
"cpe": "cpe:2.3:a:kde:kdelibs:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "4.14.31"
}
],
"source": "CPE_RANGE"
}