CVE:CVE-2019-14822
CNNVD:CNNVD-201909-701
ibus是一款适用于Linux/Unix平台的输入框架。
ibus 1.5.22之前版本中存在安全漏洞。该漏洞源于Dbus服务器设置中存在不正确的配置。本地攻击者可利用该漏洞拦截受影响用户的全部击键，修改输入方法引擎或修改其他用户与输入相关的配置。
solution:Upgrade ibus_project ibus to a higher version than 1.5.22,and avoid the version (,1.5.22); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,and avoid the version 16.04,18.04,19.10; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8