CVE catalog
CVE-2014-5033
kde4libs - security update
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 25, 2026
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu3 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu4 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.80-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.95-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.97-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.97-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.0-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.1-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.2-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.2-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.3-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.90-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.95-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.97-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.0-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.0-0ubuntu1.1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.1-0ubuntu0.1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.1-0ubuntu0.2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.2a-0ubuntu0.2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.2a-0ubuntu0.3 | fixed |
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu3 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.2-0ubuntu4 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.80-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.95-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.97-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.11.97-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.0-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.1-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.2-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.2-0ubuntu2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.3-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.90-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.95-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.12.97-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.0-0ubuntu1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.0-0ubuntu1.1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.1-0ubuntu0.1 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.1-0ubuntu0.2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.2a-0ubuntu0.2 | vulnerable |
| Ubuntu | kde4libs | 14.04 | 4:4.13.2a-0ubuntu0.3 | fixed |
| Debian | kde4libs | 6.0 | 4:4.4.5-2 | vulnerable |
| Debian | kde4libs | 6.0 | 4:4.4.5-2+squeeze1 | vulnerable |
| Debian | kde4libs | 6.0 | 4:4.4.5-2+squeeze2 | vulnerable |
| Debian | kde4libs | 6.0 | 4:4.4.5-2+squeeze3 | vulnerable |
| Debian | kde4libs | 6.0 | 4:4.4.5-2+squeeze4 | fixed |
| Debian | kde4libs | 7 | 4:4.8.4-4 | vulnerable |
| Debian | kde4libs | 7 | 4:4.8.4-4+deb7u1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | kde4libs | deb | 14.04 | 4:4.13.2a-0ubuntu0.3 | Not reported | UBUNTU-CVE-2014-5033 | Not reported |
| Ubuntu | kde4libs | deb | 14.04 | 4:4.13.2a-0ubuntu0.3 | Not reported | USN-2304-1 | Not reported |
| Debian | kde4libs | deb | 6.0 | 4:4.4.5-2+squeeze4 | Not reported | DLA-76-1 | Not reported |
| Debian | kde4libs | deb | 7 | 4:4.8.4-4+deb7u1 | Not reported | DSA-3004-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://access.redhat.com/errata/RHSA-2014:1359]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2014_1359.json]
- [https://osv.dev/vulnerability/DLA-76-1]
- [https://osv.dev/vulnerability/DSA-3004-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2014-5033]
- [https://osv.dev/vulnerability/USN-2304-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]