cve/2017/CVE-2017-8422.md

CVE-2017-8422

Description

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.

POC

Reference

• http://www.openwall.com/lists/oss-security/2017/05/10/3
• https://www.exploit-db.com/exploits/42053/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/WhaleShark-Team/murasame
• https://github.com/stealth/plasmapulsar