# CVE-2019-14744: kdelibs5-data: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with...

CVE-2019-14744 is fixed in 40 products on 1 platform, first by kdelibs-bin 4:4.14.38-0ubuntu3.1, released August 6, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-14744
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0407
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 6, 2019

## Description

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | kdelibs-bin Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [kdelibs-bin 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kdelibs-bin-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | kdelibs5-data Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [kdelibs5-data 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kdelibs5-data-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | kdelibs5-plugins Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [kdelibs5-plugins 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kdelibs5-plugins-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | kdoctools Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [kdoctools 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-kdoctools-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkcmutils4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkcmutils4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkcmutils4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkde3support4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkde3support4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkde3support4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdeclarative5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdeclarative5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdeclarative5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdecore5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdecore5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdecore5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdesu5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdesu5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdesu5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdeui5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdeui5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdeui5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdewebkit5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdewebkit5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdewebkit5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkdnssd4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkdnssd4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkdnssd4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkemoticons4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkemoticons4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkemoticons4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkf5config-bin Ubuntu 18.04.6 LTS (bionic) | 5.44.0-0ubuntu1.1 | [libkf5config-bin 5.44.0-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkf5config-bin-5.44.0-0ubuntu1.1.md) | Aug 6, 2019 |
| Linux | libkf5config-data Ubuntu 18.04.6 LTS (bionic) | 5.44.0-0ubuntu1.1 | [libkf5config-data 5.44.0-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkf5config-data-5.44.0-0ubuntu1.1.md) | Aug 6, 2019 |
| Linux | libkf5configcore5 Ubuntu 18.04.6 LTS (bionic) | 5.44.0-0ubuntu1.1 | [libkf5configcore5 5.44.0-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkf5configcore5-5.44.0-0ubuntu1.1.md) | Aug 6, 2019 |
| Linux | libkf5configgui5 Ubuntu 18.04.6 LTS (bionic) | 5.44.0-0ubuntu1.1 | [libkf5configgui5 5.44.0-0ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkf5configgui5-5.44.0-0ubuntu1.1.md) | Aug 6, 2019 |
| Linux | libkfile4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkfile4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkfile4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkhtml5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkhtml5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkhtml5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkidletime4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkidletime4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkidletime4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkimproxy4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkimproxy4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkimproxy4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkio5 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkio5 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkio5-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkjsapi4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkjsapi4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkjsapi4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkjsembed4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkjsembed4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkjsembed4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkmediaplayer4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkmediaplayer4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkmediaplayer4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libknewstuff2-4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libknewstuff2-4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libknewstuff2-4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libknewstuff3-4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libknewstuff3-4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libknewstuff3-4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libknotifyconfig4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libknotifyconfig4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libknotifyconfig4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkntlm4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkntlm4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkntlm4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkparts4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkparts4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkparts4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkprintutils4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkprintutils4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkprintutils4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkpty4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkpty4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkpty4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkrosscore4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkrosscore4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkrosscore4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkrossui4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkrossui4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkrossui4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libktexteditor4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libktexteditor4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libktexteditor4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkunitconversion4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkunitconversion4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkunitconversion4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libkutils4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libkutils4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libkutils4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libplasma3 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libplasma3 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libplasma3-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libsolid4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libsolid4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libsolid4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |
| Linux | libthreadweaver4 Ubuntu 18.04.6 LTS (bionic) | 4:4.14.38-0ubuntu3.1 | [libthreadweaver4 4:4.14.38-0ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libthreadweaver4-4-4.14.38-0ubuntu3.1.md) | Aug 6, 2019 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.