Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1764
HistoryApr 16, 2014 - 12:00 a.m.

CVE-2013-1764

2014-04-1600:00:00
ubuntu.com
ubuntu.com
5

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users
to downgrade packages via the “install updates” method.

Notes

Author Note
jdstrand per Debian, Zypp backend specific to SuSE

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

Related for UB:CVE-2013-1764