USN-4134-1: IBus vulnerability
Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this IBus vulnerability?
The vulnerability ID for this IBus vulnerability is CVE-2019-14822.
What is the severity of CVE-2019-14822?
The severity of CVE-2019-14822 has not been provided in the information provided.
How does this IBus vulnerability work?
This IBus vulnerability allows a local unprivileged user to capture the keystrokes of another user by exploiting the lack of access controls on the private D-Bus socket.
Which versions of IBus are affected by CVE-2019-14822?
IBus versions 1.5.19-1ubuntu2.1, 1.5.17-3ubuntu5.1, and 1.5.11-1ubuntu2.2 are affected by CVE-2019-14822.
How can I fix the IBus vulnerability?
To fix the IBus vulnerability, you need to update IBus to version 1.5.19-1ubuntu2.1, 1.5.17-3ubuntu5.1, or 1.5.11-1ubuntu2.2 depending on your Ubuntu version.