CVE catalog
CVE-2020-12755
kio-extras: CVE-2020-12755
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.37% · Oct 25, 2026
fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had not set the keepPassword option. This may lead to unintended KWallet storage of a password.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kio-extras | sid | 4:26.08.2-1 | fixed |
| Debian | kio-extras | forky | 4:26.04.0-1 | fixed |
| Debian | kio-extras | trixie | 4:25.04.3-1 | fixed |
| Debian | kio-extras | bookworm | 4:22.12.3-1 | fixed |
| Ubuntu | kio-extras | 16.04 | 4:15.08.2-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 16.04 | 4:15.12.1-1ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 16.04 | 4:15.12.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 18.04 | 4:17.04.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 18.04 | 4:17.08.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 18.04 | 4:17.12.2-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 18.04 | 4:17.12.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 18.04 | 4:17.12.3-0ubuntu2 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.04.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.08.1-1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.08.3-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.08.3-0ubuntu2 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.12.0-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.12.1-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.12.2-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.12.3a-0ubuntu1 | vulnerable |
| Ubuntu | kio-extras | 20.04 | 4:19.12.3a-0ubuntu2 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kio-extras | source | sid | 4:20.08.3-1 | low | Not reported | [960306] |
| Debian | kio-extras | source | forky | 4:20.08.3-1 | low | Not reported | [960306] |
| Debian | kio-extras | source | trixie | 4:20.08.3-1 | low | Not reported | [960306] |
| Debian | kio-extras | source | bookworm | 4:20.08.3-1 | low | Not reported | [960306] |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [kio-extras]Fixed
Details (2)
4:22.12.3-1· amd64 · bookwormFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · bookworm; dsa · kio-extras · debian · 12
4:22.12.3-1· arm64 · bookwormFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · bookworm; dsa · kio-extras · debian · 12
- [kio-extras-data]Fixed
Source package: [kio-extras]
Details (2)
4:22.12.3-1· all · bookwormFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · bookworm; dsa · kio-extras · debian · 12
4:22.12.3-1· all · bookwormFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · bookworm; dsa · kio-extras · debian · 12
[Debian 13 (Trixie)]
- [kio-extras]Fixed
Details (2)
4:25.04.3-1· amd64 · trixieFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · 13
4:25.04.3-1· arm64 · trixieFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · 13
- [kio-extras-data]Fixed
Source package: [kio-extras]
Details (2)
4:25.04.3-1· all · trixieFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · 13
4:25.04.3-1· all · trixieFixed · Fixed:
4:20.08.3-1dsa · kio-extras · debian · 13
Observed: