Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-5033
HistoryAug 19, 2014 - 6:55 p.m.

Race condition

2014-08-1918:55:00
PRIOn knowledge base
www.prio-n.com
6

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and “PID reuse race conditions.”