CVE catalog

CVE-2018-6790

plasma-workspace affected and fixed versions

[CVE catalog]

An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.09% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixieplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debiantrixieplasma-workspace4:6.3.6-2Fixed[CVE-2018-6790]
Debiansidplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debiansidplasma-workspace4:6.7.4-2Fixed[CVE-2018-6790]
Debianforkyplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debianforkyplasma-workspace4:6.7.4-2Fixed[CVE-2018-6790]
Debianbookworm-securityplasma-workspace4:5.27.5-2+deb12u2Fixed[CVE-2018-6790]
Debianbookwormplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debianbookwormplasma-workspace4:5.27.5-2+deb12u2Fixed[CVE-2018-6790]

Showing 9 fix observations. All 17 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedplasma-workspace4:5.12.0-2UnknownSource applicability is not establishedProvider not reported
Debianbookwormplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debianbookwormplasma-workspace4:5.27.5-2+deb12u2Fixed[CVE-2018-6790]
Debianbookworm-securityplasma-workspace4:5.27.5-2+deb12u2Fixed[CVE-2018-6790]
Debianforkyplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debianforkyplasma-workspace4:6.7.4-2Fixed[CVE-2018-6790]
Debiansidplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debiansidplasma-workspace4:6.7.4-2Fixed[CVE-2018-6790]
Debiantrixieplasma-workspace4:5.12.0-2FixedDistribution-reported fixed boundary[CVE-2018-6790]
Debiantrixieplasma-workspace4:6.3.6-2Fixed[CVE-2018-6790]
Susepackage hub 12 sp3plasma5-workspace5.8.7-8.1UnknownSource applicability is not established[OPENSUSE-SU-2018:0397-1][OPENSUSE-SU-2018:0398-1]
Ubuntuproplasma-workspace4:5.4.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Ubuntuproplasma-workspace4:5.4.3-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Ubuntuproplasma-workspace4:5.5.4-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Ubuntuproplasma-workspace4:5.5.5.2-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Ubuntuproplasma-workspace4:5.5.5.2-0ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Ubuntuproplasma-workspace4:5.5.5.2-0ubuntu1.1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2018-6790]
Original provider fields
{
  "package_releases": [
    {
      "name": "plasma-workspace",
      "status": "fixed",
      "release": "sid",
      "version": "4:6.7.4-2"
    },
    {
      "name": "plasma-workspace",
      "status": "fixed",
      "release": "forky",
      "version": "4:6.7.4-2"
    },
    {
      "name": "plasma-workspace",
      "status": "fixed",
      "release": "trixie",
      "version": "4:6.3.6-2"
    },
    {
      "name": "plasma-workspace",
      "status": "fixed",
      "release": "bookworm",
      "version": "4:5.27.5-2+deb12u2"
    },
    {
      "name": "plasma-workspace",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "4:5.27.5-2+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "plasma-workspace",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "4:5.12.0-2"
    },
    {
      "bug": null,
      "name": "plasma-workspace",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "4:5.12.0-2"
    },
    {
      "bug": null,
      "name": "plasma-workspace",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "4:5.12.0-2"
    },
    {
      "bug": null,
      "name": "plasma-workspace",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "4:5.12.0-2"
    }
  ],
  "distribution_packages": [
    {
      "name": "plasma-workspace",
      "fixed_version": "4:5.12.0-2",
      "applicability_unknown": true
    },
    {
      "name": "plasma-workspace",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "4:5.4.2-0ubuntu1",
        "4:5.4.3-0ubuntu1",
        "4:5.5.4-0ubuntu1",
        "4:5.5.5.2-0ubuntu1",
        "4:5.5.5.2-0ubuntu1.1",
        "4:5.5.5.2-0ubuntu1.1+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2018-6790",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2018-6790",
      "provider_updated_at": "2026-09-28T05:30:04.776419599Z",
      "applicability_unknown": true
    },
    {
      "name": "plasma5-workspace",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.8.7-8.1"
            }
          ]
        }
      ],
      "release": "package hub 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0397-1",
      "fixed_version": "5.8.7-8.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2018:0397-1",
      "provider_updated_at": "2026-02-04T04:37:12.804529Z",
      "applicability_unknown": true
    },
    {
      "name": "plasma5-workspace",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.8.7-8.1"
            }
          ]
        }
      ],
      "release": "package hub 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2018:0398-1",
      "fixed_version": "5.8.7-8.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2018:0398-1",
      "provider_updated_at": "2026-02-04T02:18:37.471116Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • [libkfontinst5]Unknown

    Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · all · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · all · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · all · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

  • Source package: [plasma-workspace]

    Details (4)
    • 4:5.27.5-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

    • 4:5.27.5-2+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · bookworm; dsa · plasma-workspace · debian · 12

[Debian 13 (Trixie)]

  • Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

  • Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

  • [libkfontinst6]Unknown

    Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

  • Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

  • [libklipper6]Unknown

    Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

  • [libkmpris6]Unknown

    Source package: [plasma-workspace]

    Details (2)
    • 4:6.3.6-2 · amd64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

    • 4:6.3.6-2 · arm64 · trixie

      Fixed · Fixed: 4:5.12.0-2

      dsa · plasma-workspace · debian · 13

Next results

Observed:

References