CVE-2013-4394

2013-10-2822:55:03

CWE-276

[email protected]

web.nvd.nist.gov

CVSS2

5.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:C/I:C/A:P

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving “special and control characters.”