CVE catalog

CVE-2019-14822

ibus: CVE-2019-14822

[CVE catalog]

Severity
High · CVSS 8CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianibussid1.5.35~rc1-1fixed
Debianibusforky1.5.35~rc1-1fixed
Debianibustrixie1.5.32-2fixed
Debianibusbookworm1.5.27-5fixed
Ubuntuibus16.041.5.10-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.2vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.3vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.4fixed
Ubuntuibus18.041.5.14-2ubuntu1vulnerable
Ubuntuibus18.041.5.14-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-1ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu3vulnerable
Ubuntuibus18.041.5.17-3ubuntu4vulnerable
Ubuntuibus18.041.5.17-3ubuntu5vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.1vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.2vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.3fixed
Ubuntuibus16.041.5.10-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.2vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.3vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.4fixed
Ubuntuibus18.041.5.14-2ubuntu1vulnerable
Ubuntuibus18.041.5.14-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-1ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu3vulnerable
Ubuntuibus18.041.5.17-3ubuntu4vulnerable
Ubuntuibus18.041.5.17-3ubuntu5vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.1vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.2vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.3fixed
Ubuntuibus16.041.5.10-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.1vulnerable
Ubuntuibus16.041.5.11-1ubuntu2.2fixed
Ubuntuibus18.041.5.14-2ubuntu1vulnerable
Ubuntuibus18.041.5.14-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-1ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu1vulnerable
Ubuntuibus18.041.5.17-3ubuntu3vulnerable
Ubuntuibus18.041.5.17-3ubuntu4vulnerable
Ubuntuibus18.041.5.17-3ubuntu5vulnerable
Ubuntuibus18.041.5.17-3ubuntu5.1fixed
Opensuseibustumbleweed1.5.25-1.2fixed
Suseibuslinux enterprise server for sap applications 12 sp11.5.8-10.4.1fixed
Suseibuslinux enterprise server 12 sp1-ltss1.5.8-10.4.1fixed
Suseibushpe helion openstack 81.5.13-15.11.2fixed
Suseibusopenstack cloud 71.5.13-15.11.2fixed
Suseibusopenstack cloud 81.5.13-15.11.2fixed
Suseibusopenstack cloud crowbar 81.5.13-15.11.2fixed
Suseibuslinux enterprise desktop 12 sp41.5.13-15.11.2fixed
Suseibuslinux enterprise server for sap applications 12 sp21.5.13-15.11.2fixed
Suseibuslinux enterprise server for sap applications 12 sp31.5.13-15.11.2fixed
Suseibuslinux enterprise software development kit 12 sp41.5.13-15.11.2fixed
Suseibuslinux enterprise software development kit 12 sp51.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp2-ltss1.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp2-bcl1.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp3-ltss1.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp3-bcl1.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp41.5.13-15.11.2fixed
Suseibuslinux enterprise server for sap applications 12 sp41.5.13-15.11.2fixed
Suseibuslinux enterprise server 12 sp51.5.13-15.11.2fixed
Suseibuslinux enterprise server for sap applications 12 sp51.5.13-15.11.2fixed
Suseibuslinux enterprise workstation extension 12 sp41.5.13-15.11.2fixed
Suseibuslinux enterprise workstation extension 12 sp51.5.13-15.11.2fixed
Suseibusenterprise storage 41.5.13-15.11.2fixed
Suseibusenterprise storage 51.5.13-15.11.2fixed
Suseibuslinux enterprise module for desktop applications 151.5.17-5.3.1fixed
Suseibuslinux enterprise module for desktop applications 15 sp11.5.19-8.3.1fixed
Opensuseibusleap 15.01.5.17-lp150.4.3.1fixed
Opensusepython3-ibusleap 15.01.5.17-lp150.4.3.1fixed
Opensuseibusleap 15.11.5.19-lp151.2.3.1fixed
Opensusepython-ibusleap 15.11.5.19-lp151.2.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianibussourcesid1.5.21-1not yet assignedNot reported[940267]
Debianibussourceforky1.5.21-1not yet assignedNot reported[940267]
Debianibussourcetrixie1.5.21-1not yet assignedNot reported[940267]
Debianibussourcebookworm1.5.21-1not yet assignedNot reported[940267]
Ubuntuibusdeb16.041.5.11-1ubuntu2.4Not reportedUBUNTU-CVE-2019-14822Not reported
Ubuntuibusdeb18.041.5.17-3ubuntu5.3Not reportedUBUNTU-CVE-2019-14822Not reported
Ubuntuibusdeb16.041.5.11-1ubuntu2.4Not reportedUSN-4134-3Not reported
Ubuntuibusdeb18.041.5.17-3ubuntu5.3Not reportedUSN-4134-3Not reported
Ubuntuibusdeb16.041.5.11-1ubuntu2.2Not reportedUSN-4134-1Not reported
Ubuntuibusdeb18.041.5.17-3ubuntu5.1Not reportedUSN-4134-1Not reported
Opensuseibusrpmtumbleweed1.5.25-1.2Not reportedOPENSUSE-SU-2024:10853-1Not reported
Suseibusrpmlinux enterprise server for sap applications 12 sp11.5.8-10.4.1Not reportedSUSE-SU-2019:2388-1Not reported
Suseibusrpmlinux enterprise server 12 sp1-ltss1.5.8-10.4.1Not reportedSUSE-SU-2019:2388-1Not reported
Suseibusrpmhpe helion openstack 81.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmopenstack cloud 71.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmopenstack cloud 81.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmopenstack cloud crowbar 81.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise desktop 12 sp41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server for sap applications 12 sp21.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server for sap applications 12 sp31.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise software development kit 12 sp41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise software development kit 12 sp51.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp2-ltss1.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp2-bcl1.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp3-ltss1.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp3-bcl1.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server for sap applications 12 sp41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server 12 sp51.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise server for sap applications 12 sp51.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise workstation extension 12 sp41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise workstation extension 12 sp51.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmenterprise storage 41.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmenterprise storage 51.5.13-15.11.2Not reportedSUSE-SU-2019:2389-1Not reported
Suseibusrpmlinux enterprise module for desktop applications 151.5.17-5.3.1Not reportedSUSE-SU-2019:2387-1Not reported
Suseibusrpmlinux enterprise module for desktop applications 15 sp11.5.19-8.3.1Not reportedSUSE-SU-2019:2427-1Not reported
Opensuseibusrpmleap 15.01.5.17-lp150.4.3.1Not reportedOPENSUSE-SU-2019:2174-1Not reported
Opensusepython3-ibusrpmleap 15.01.5.17-lp150.4.3.1Not reportedOPENSUSE-SU-2019:2174-1Not reported
Opensuseibusrpmleap 15.11.5.19-lp151.2.3.1Not reportedOPENSUSE-SU-2019:2199-1Not reported
Opensusepython-ibusrpmleap 15.11.5.19-lp151.2.3.1Not reportedOPENSUSE-SU-2019:2199-1Not reported

[Debian bug #940267]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [ibus-devel]Unknown

    Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · noarch · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • [ibus-gtk]Unknown

    Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • [ibus-gtk3]Unknown

    Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • [ibus-lang]Unknown

    Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · noarch · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • [libibus-1_0-5]Unknown

    Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

  • Source package: [ibus]

    Details (1)
    • 1.5.34-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.5.25-1.2

      Version impact unknown

      dsa · ibus · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus]Fixed
    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-data]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · all · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · all · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-doc]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · all · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · all · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-gtk]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-gtk3]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-gtk4]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • [ibus-tests]Fixed

    Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

  • Source package: [ibus]

    Details (4)
    • 1.5.27-5 · amd64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.27-5 · arm64 · bookworm

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

    • 1.5.31-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.5.21-1

      dsa · ibus · debian · bookworm; dsa · ibus · debian · 12

Next results

Observed:

References