Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-4327HistoryOct 03, 2013 - 9:55 p.m.
CVE-2013-4327
2013-10-0321:55:00
Debian Security Bug Tracker
security-tracker.debian.org
11
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | systemd | < 204-5 | systemd_204-5_all.deb |
| Debian | 11 | all | systemd | < 204-5 | systemd_204-5_all.deb |
| Debian | 10 | all | systemd | < 204-5 | systemd_204-5_all.deb |
| Debian | 999 | all | systemd | < 204-5 | systemd_204-5_all.deb |
| Debian | 13 | all | systemd | < 204-5 | systemd_204-5_all.deb |
Related
ubuntucve
ubuntucve
cve
cve
prion
prion
nessus
nessus
Mandriva Linux Security Advisory : polkit (MDVSA-2013:243)
2013-09-28 00:00:00
Fedora 19 : systemd-204-15.fc19 (2013-17119)
2013-09-22 00:00:00
Fedora 18 : systemd-201-2.fc18.8 (2013-17203)
2013-09-23 00:00:00
securityvulns
securityvulns
PolicyKit protection bypass
2013-10-01 00:00:00
[ MDVSA-2013:243 ] polkit
2013-10-01 00:00:00
systemd security vulnerabilities
2013-10-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0293)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-1961-1)
2013-09-24 00:00:00
Fedora Update for systemd FEDORA-2013-17119
2013-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: systemd-207-4.fc20
2013-09-23 00:21:01
[SECURITY] Fedora 18 Update: systemd-201-2.fc18.8
2013-09-23 00:02:39
[SECURITY] Fedora 19 Update: systemd-204-15.fc19
2013-09-21 08:38:23
mageia
mageia
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00
ubuntu
ubuntu
systemd vulnerability
2013-09-18 00:00:00
polkit vulnerability
2013-09-18 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:59:31
Authorization Bypass
2019-01-15 08:59:41
debiancve
debiancve
centos
centos
polkit security update
2013-09-20 02:25:01
redhat
redhat
(RHSA-2013:1270) Important: polkit security update
2013-09-19 00:00:00
(RHSA-2013:1460) Important: rhev-hypervisor6 security and bug fix update
2013-10-29 00:00:00
oraclelinux
oraclelinux
polkit security update
2013-09-19 00:00:00
debian
debian
[SECURITY] [DSA 2777-1] systemd security update
2013-10-11 14:51:10
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for DEBIANCVE:CVE-2013-4327