CVE catalog

CVE-2019-14744

kconfig: CVE-2019-14744

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.07% · Oct 25, 2026

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankconfigsid5.116.0-2fixed
Debiankconfigforky5.116.0-2fixed
Debiankconfigtrixie5.116.0-1fixed
Debiankconfigbookworm5.103.0-2fixed
Ubuntukde4libspro4:4.11.2-0ubuntu2vulnerable
Ubuntukde4libspro4:4.11.2-0ubuntu3vulnerable
Ubuntukde4libspro4:4.11.2-0ubuntu4vulnerable
Ubuntukde4libspro4:4.11.80-0ubuntu1vulnerable
Ubuntukde4libspro4:4.11.95-0ubuntu1vulnerable
Ubuntukde4libspro4:4.11.97-0ubuntu1vulnerable
Ubuntukde4libspro4:4.11.97-0ubuntu2vulnerable
Ubuntukde4libspro4:4.12.0-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.1-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.2-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.2-0ubuntu2vulnerable
Ubuntukde4libspro4:4.12.3-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.90-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.95-0ubuntu1vulnerable
Ubuntukde4libspro4:4.12.97-0ubuntu1vulnerable
Ubuntukde4libspro4:4.13.0-0ubuntu1vulnerable
Ubuntukde4libspro4:4.13.0-0ubuntu1.1vulnerable
Ubuntukde4libspro4:4.13.1-0ubuntu0.1vulnerable
Ubuntukde4libspro4:4.13.1-0ubuntu0.2vulnerable
Ubuntukde4libspro4:4.13.2a-0ubuntu0.2vulnerable
Ubuntukde4libspro4:4.13.2a-0ubuntu0.3vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.1vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.2vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.3vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.4vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.5vulnerable
Ubuntukde4libspro4:4.13.3-0ubuntu0.5+esm1fixed
Ubuntukconfig16.045.15.0-0ubuntu1vulnerable
Ubuntukconfig16.045.15.0-0ubuntu2vulnerable
Ubuntukconfig16.045.18.0-0ubuntu1vulnerable
Ubuntukconfig16.045.18.0-0ubuntu1.1fixed
Ubuntukde4libs16.044:4.14.13-0ubuntu1vulnerable
Ubuntukde4libs16.044:4.14.13-0ubuntu2vulnerable
Ubuntukde4libs16.044:4.14.13-0ubuntu3vulnerable
Ubuntukde4libs16.044:4.14.13-0ubuntu4vulnerable
Ubuntukde4libs16.044:4.14.13-0ubuntu6vulnerable
Ubuntukde4libs16.044:4.14.16-0ubuntu1vulnerable
Ubuntukde4libs16.044:4.14.16-0ubuntu3vulnerable
Ubuntukde4libs16.044:4.14.16-0ubuntu3.1vulnerable
Ubuntukde4libs16.044:4.14.16-0ubuntu3.2vulnerable
Ubuntukde4libs16.044:4.14.16-0ubuntu3.3fixed
Ubuntukconfig18.045.38.0-0ubuntu1vulnerable
Ubuntukconfig18.045.40.0-0ubuntu1vulnerable
Ubuntukconfig18.045.41.0-0ubuntu1vulnerable
Ubuntukconfig18.045.42.0-0ubuntu1vulnerable
Ubuntukconfig18.045.43.0-0ubuntu1vulnerable
Ubuntukconfig18.045.44.0-0ubuntu1vulnerable
Ubuntukconfig18.045.44.0-0ubuntu1.1fixed
Ubuntukde4libs18.044:4.14.34-0ubuntu2vulnerable
Ubuntukde4libs18.044:4.14.38-0ubuntu2vulnerable
Ubuntukde4libs18.044:4.14.38-0ubuntu3vulnerable
Ubuntukde4libs18.044:4.14.38-0ubuntu3.1fixed
Susekconfigpackage hub 155.45.0-bp150.3.8.2fixed
Susekdelibs4package hub 154.14.38-bp150.3.8.1fixed
Susekdelibs4-apidocspackage hub 154.14.38-bp150.3.8.1fixed
Susekconfigpackage hub 12 sp15.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp14.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp14.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 12 sp25.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp24.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp24.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 12 sp35.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp34.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp34.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 155.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 154.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 154.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 15 sp15.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 15 sp14.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 15 sp14.14.38-bp151.9.5.1fixed
Opensusekconfigleap 15.05.55.0-bp151.3.5.1fixed
Opensusekdelibs4leap 15.04.14.38-bp151.9.5.1fixed
Opensusekdelibs4-apidocsleap 15.04.14.38-bp151.9.5.1fixed
Opensusekconfigleap 15.15.55.0-bp151.3.5.1fixed
Opensusekdelibs4leap 15.14.14.38-bp151.9.5.1fixed
Opensusekdelibs4-apidocsleap 15.14.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 15 sp15.55.0-bp151.3.8.1fixed
Susekdelibs4package hub 15 sp14.14.38-bp151.9.8.2fixed
Susekdelibs4-apidocspackage hub 15 sp14.14.38-bp151.9.8.1fixed
Susekconfigpackage hub 12 sp15.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp14.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp14.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 12 sp25.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp24.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp24.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 12 sp35.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 12 sp34.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 12 sp34.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 155.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 154.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 154.14.38-bp151.9.5.1fixed
Susekconfigpackage hub 15 sp15.55.0-bp151.3.5.1fixed
Susekdelibs4package hub 15 sp14.14.38-bp151.9.5.1fixed
Susekdelibs4-apidocspackage hub 15 sp14.14.38-bp151.9.5.1fixed
Opensusekconfigleap 15.05.55.0-bp151.3.5.1fixed
Opensusekdelibs4leap 15.04.14.38-bp151.9.5.1fixed
Opensusekdelibs4-apidocsleap 15.04.14.38-bp151.9.5.1fixed
Opensusekconfigleap 15.15.55.0-bp151.3.5.1fixed
Opensusekdelibs4leap 15.14.14.38-bp151.9.5.1fixed
Opensusekdelibs4-apidocsleap 15.14.14.38-bp151.9.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankconfigsourcesid5.54.0-2not yet assignedNot reported[934267]
Debiankconfigsourceforky5.54.0-2not yet assignedNot reported[934267]
Debiankconfigsourcetrixie5.54.0-2not yet assignedNot reported[934267]
Debiankconfigsourcebookworm5.54.0-2not yet assignedNot reported[934267]
Ubuntukde4libsdebpro4:4.13.3-0ubuntu0.5+esm1Not reportedUBUNTU-CVE-2019-14744Not reported
Ubuntukconfigdeb16.045.18.0-0ubuntu1.1Not reportedUBUNTU-CVE-2019-14744Not reported
Ubuntukde4libsdeb16.044:4.14.16-0ubuntu3.3Not reportedUBUNTU-CVE-2019-14744Not reported
Ubuntukconfigdeb18.045.44.0-0ubuntu1.1Not reportedUBUNTU-CVE-2019-14744Not reported
Ubuntukde4libsdeb18.044:4.14.38-0ubuntu3.1Not reportedUBUNTU-CVE-2019-14744Not reported
Susekconfigrpmpackage hub 155.45.0-bp150.3.8.2Not reportedOPENSUSE-SU-2019:1855-1Not reported
Susekdelibs4rpmpackage hub 154.14.38-bp150.3.8.1Not reportedOPENSUSE-SU-2019:1855-1Not reported
Susekdelibs4-apidocsrpmpackage hub 154.14.38-bp150.3.8.1Not reportedOPENSUSE-SU-2019:1855-1Not reported
Susekconfigrpmpackage hub 12 sp15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4rpmpackage hub 12 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekconfigrpmpackage hub 12 sp25.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4rpmpackage hub 12 sp24.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp24.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekconfigrpmpackage hub 12 sp35.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4rpmpackage hub 12 sp34.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp34.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekconfigrpmpackage hub 155.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4rpmpackage hub 154.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4-apidocsrpmpackage hub 154.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekconfigrpmpackage hub 15 sp15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4rpmpackage hub 15 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekdelibs4-apidocsrpmpackage hub 15 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekconfigrpmleap 15.05.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekdelibs4rpmleap 15.04.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekdelibs4-apidocsrpmleap 15.04.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekconfigrpmleap 15.15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekdelibs4rpmleap 15.14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Opensusekdelibs4-apidocsrpmleap 15.14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-2Not reported
Susekconfigrpmpackage hub 15 sp15.55.0-bp151.3.8.1Not reportedOPENSUSE-SU-2019:1898-1Not reported
Susekdelibs4rpmpackage hub 15 sp14.14.38-bp151.9.8.2Not reportedOPENSUSE-SU-2019:1898-1Not reported
Susekdelibs4-apidocsrpmpackage hub 15 sp14.14.38-bp151.9.8.1Not reportedOPENSUSE-SU-2019:1898-1Not reported
Susekconfigrpmpackage hub 12 sp15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4rpmpackage hub 12 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekconfigrpmpackage hub 12 sp25.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4rpmpackage hub 12 sp24.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp24.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekconfigrpmpackage hub 12 sp35.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4rpmpackage hub 12 sp34.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4-apidocsrpmpackage hub 12 sp34.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekconfigrpmpackage hub 155.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4rpmpackage hub 154.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4-apidocsrpmpackage hub 154.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekconfigrpmpackage hub 15 sp15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4rpmpackage hub 15 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Susekdelibs4-apidocsrpmpackage hub 15 sp14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekconfigrpmleap 15.05.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekdelibs4rpmleap 15.04.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekdelibs4-apidocsrpmleap 15.04.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekconfigrpmleap 15.15.55.0-bp151.3.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekdelibs4rpmleap 15.14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported
Opensusekdelibs4-apidocsrpmleap 15.14.14.38-bp151.9.5.1Not reportedOPENSUSE-SU-2019:1851-1Not reported

[Debian bug #934267]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · all · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · all · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · all · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · all · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

  • Source package: [kconfig]

    Details (2)
    • 5.103.0-2 · amd64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

    • 5.103.0-2 · arm64 · bookworm

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · bookworm; dsa · kconfig · debian · 12

[Debian 13 (Trixie)]

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · all · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · all · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · all · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · all · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

  • Source package: [kconfig]

    Details (2)
    • 5.116.0-1 · amd64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

    • 5.116.0-1 · arm64 · trixie

      Fixed · Fixed: 5.54.0-2

      dsa · kconfig · debian · 13

Observed:

References