Design/Logic Flaw

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4393

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

CVE-2013-4392

The systemd service is vulnerable to a symlink attack when updating file permissions. A local user can exploit this to modify permissions and SELinux security contexts for arbitrary files. The vulnerability is categorized under CWE-59: Improper Link Resolution Before File Access ('Link Following'...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4391

CVE-2013-4391 : Integer overflow in systemd’s journald-native.c (valid_user_field) allows remote attackers to crash the service and possibly execute code via a very large journal data field, triggering a heap-based buffer overflow. Documented impact includes denial of service and potential arbitr...

CVE-2013-4394

CVE-2013-4394 concerns systemd’s SetX11Keyboard function. When PKLA is used to change group permissions on XKB layouts, local users in that group may modify the Xorg X11 Server configuration file and potentially gain privileges through vectors involving special and control characters. The vulnera...

CVE-2013-4391

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

CVE-2013-4391

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4393

CVE-2013-4393 concerns the journald component of systemd. The vulnerability occurs when the origin of native messages is set to file, allowing a local attacker to trigger a denial of service (logging service blocking) by using a crafted file descriptor. The impact described in connected sources i...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

CVE-2013-4393

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

CVE-2013-4393

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

CVE-2013-4393

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

PT-2013-4995

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue allows local users to cause a denial of service, specifically blocking the logging service, by utilizing a crafted file descriptor when the origin of native messages is set to file ...

CVE-2013-4391: Integer Overflow or Wraparound

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4394: Incorrect Default Permissions

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

PT-2013-4994 · Systemd +2 · Systemd +2

Name of the Vulnerable Software and Affected Versions: systemd affected versions not specified Description: The issue allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files. Recommendations: At the moment, there is ...