Lucene search
Ubuntu.comUB:CVE-2013-4324HistoryOct 03, 2013 - 12:00 a.m.
CVE-2013-4324
2013-10-0300:00:00
ubuntu.com
ubuntu.com
17
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
spice-gtk 0.14, and possibly other versions, invokes the polkit authority
using the insecure polkit_unix_process_new API function, which allows local
users to bypass intended access restrictions by leveraging a
PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or
(2) pkexec process, a related issue to CVE-2013-4288.
Related
cvelist
cvelist
prion
prion
nvd
nvd
debiancve
debiancve
cve
cve
nessus
nessus
Fedora 19 : spice-gtk-0.20-6.fc19 (2013-17109)
2013-09-27 00:00:00
CentOS 6 : spice-gtk (CESA-2013:1273)
2013-09-20 00:00:00
Oracle Linux 6 : spice-gtk (ELSA-2013-1273)
2013-09-20 00:00:00
openvas
openvas
Fedora Update for spice-gtk FEDORA-2013-17109
2013-10-03 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17195
2013-12-23 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17109
2013-10-03 00:00:00
oraclelinux
oraclelinux
spice-gtk security update
2013-09-19 00:00:00
polkit security update
2013-09-19 00:00:00
centos
centos
spice security update
2013-09-20 02:25:25
polkit security update
2013-09-20 02:25:01
fedora
fedora
[SECURITY] Fedora 18 Update: spice-gtk-0.18-3.fc18
2013-12-19 07:19:49
[SECURITY] Fedora 19 Update: spice-gtk-0.20-6.fc19
2013-09-27 00:45:25
[SECURITY] Fedora 18 Update: polkit-0.107-6.fc18
2013-09-22 04:28:15
veracode
veracode
Privilege Escalation
2019-01-15 08:59:31
Authorization Bypass
2019-01-15 08:59:36
Authorization Bypass
2019-01-15 08:59:41
redhat
redhat
(RHSA-2013:1273) Important: spice-gtk security update
2013-09-19 00:00:00
(RHSA-2013:1270) Important: polkit security update
2013-09-19 00:00:00
(RHSA-2013:1460) Important: rhev-hypervisor6 security and bug fix update
2013-10-29 00:00:00
ubuntucve
ubuntucve
mageia
mageia
ubuntu
ubuntu
polkit vulnerability
2013-09-18 00:00:00
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00
ibm
ibm
securityvulns
securityvulns
PolicyKit protection bypass
2013-10-01 00:00:00
[ MDVSA-2013:243 ] polkit
2013-10-01 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for UB:CVE-2013-4324