CVE catalog

CVE-2015-7543

Security update for kdelibs3

[CVE catalog]

Severity
High · CVSS 7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 27, 2026

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianarts6.01.5.9-3vulnerable
Debianarts6.01.5.9-3+avr32vulnerable
Debianarts6.01.5.9-3+deb6u1fixed
Debiankdelibs6.03.5.10.dfsg.1-5+deb6u1fixed
Susekdelibs3linux enterprise software development kit 11 sp43.5.10-23.30.5.1fixed
Susekdelibs3linux enterprise server 11 sp43.5.10-23.30.5.1fixed
Susekdelibs3linux enterprise server for sap applications 11 sp43.5.10-23.30.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianartsdeb6.01.5.9-3+deb6u1Not reportedDLA-366-1Not reported
Debiankdelibsdeb6.03.5.10.dfsg.1-5+deb6u1Not reportedDLA-367-1Not reported
Susekdelibs3rpmlinux enterprise software development kit 11 sp43.5.10-23.30.5.1Not reportedSUSE-SU-2018:3487-1Not reported
Susekdelibs3rpmlinux enterprise server 11 sp43.5.10-23.30.5.1Not reportedSUSE-SU-2018:3487-1Not reported
Susekdelibs3rpmlinux enterprise server for sap applications 11 sp43.5.10-23.30.5.1Not reportedSUSE-SU-2018:3487-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]