{
  "cveId": "CVE-2019-14744",
  "url": "https://patchblox.com/security/cve/CVE-2019-14744",
  "summary": "CVE-2019-14744 is fixed in 40 products on 1 platform, first by kdelibs-bin 4:4.14.38-0ubuntu3.1, released August 6, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kdelibs5-data: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with...",
  "description": "In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.",
  "published": "2019-08-06T17:00:00Z",
  "severity": "Medium",
  "epss": 0.04069,
  "epssPercentile": 0.90738,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kdelibs-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "kdelibs-bin 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kdelibs-bin-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kdelibs5-data",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "kdelibs5-data 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kdelibs5-data-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kdelibs5-plugins",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "kdelibs5-plugins 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kdelibs5-plugins-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kdoctools",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "kdoctools 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-kdoctools-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkcmutils4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkcmutils4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkcmutils4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkde3support4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkde3support4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkde3support4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdeclarative5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdeclarative5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdeclarative5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdecore5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdecore5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdecore5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdesu5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdesu5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdesu5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdeui5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdeui5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdeui5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdewebkit5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdewebkit5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdewebkit5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkdnssd4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkdnssd4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkdnssd4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkemoticons4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkemoticons4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkemoticons4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5config-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.44.0-0ubuntu1.1",
      "fix": "libkf5config-bin 5.44.0-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5config-bin-5.44.0-0ubuntu1.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5config-data",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.44.0-0ubuntu1.1",
      "fix": "libkf5config-data 5.44.0-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5config-data-5.44.0-0ubuntu1.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5configcore5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.44.0-0ubuntu1.1",
      "fix": "libkf5configcore5 5.44.0-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5configcore5-5.44.0-0ubuntu1.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkf5configgui5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.44.0-0ubuntu1.1",
      "fix": "libkf5configgui5 5.44.0-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkf5configgui5-5.44.0-0ubuntu1.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkfile4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkfile4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkfile4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkhtml5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkhtml5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkhtml5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkidletime4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkidletime4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkidletime4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkimproxy4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkimproxy4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkimproxy4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkio5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkio5 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkio5-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkjsapi4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkjsapi4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkjsapi4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkjsembed4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkjsembed4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkjsembed4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkmediaplayer4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkmediaplayer4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkmediaplayer4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libknewstuff2-4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libknewstuff2-4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libknewstuff2-4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libknewstuff3-4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libknewstuff3-4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libknewstuff3-4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libknotifyconfig4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libknotifyconfig4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libknotifyconfig4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkntlm4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkntlm4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkntlm4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkparts4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkparts4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkparts4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkprintutils4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkprintutils4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkprintutils4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkpty4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkpty4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkpty4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkrosscore4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkrosscore4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkrosscore4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkrossui4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkrossui4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkrossui4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libktexteditor4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libktexteditor4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libktexteditor4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkunitconversion4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkunitconversion4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkunitconversion4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libkutils4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libkutils4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libkutils4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libplasma3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libplasma3 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libplasma3-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsolid4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libsolid4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsolid4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libthreadweaver4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "4:4.14.38-0ubuntu3.1",
      "fix": "libthreadweaver4 4:4.14.38-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libthreadweaver4-4-4.14.38-0ubuntu3.1",
      "released": "2019-08-06T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}