Lucene search
Veracode Vulnerability DatabaseVERACODE:11279HistoryJan 15, 2019 - 8:59 a.m.
Authorization Bypass
2019-01-1508:59:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0004 Low
EPSS
Percentile
5.1%
spice-gtk is vulnerable to authorization bypass. The communication to polkit for authorization via an API call is vulnerable to a race condition in setuid or pkexec process, which allows a local user to bypass access restrictions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spice-gtk | eq | 0.11__11.el6 | |
| spice-gtk | eq | 0.11__11.el6_3.1 | |
| spice-gtk | eq | 0.6__2.el6 |
References
lists.opensuse.org/opensuse-updates/2013-10/msg00031.html
rhn.redhat.com/errata/RHSA-2013-1273.html
secunia.com/advisories/54947
www.openwall.com/lists/oss-security/2013/09/18/6
www.securityfocus.com/bid/62538
access.redhat.com/security/updates/classification/#important
rhn.redhat.com/errata/RHSA-2013-1273.html
Related
oraclelinux
oraclelinux
spice-gtk security update
2013-09-19 00:00:00
nessus
nessus
Fedora 19 : spice-gtk-0.20-6.fc19 (2013-17109)
2013-09-27 00:00:00
Fedora 18 : spice-gtk-0.18-3.fc18 (2013-17195)
2013-12-20 00:00:00
Scientific Linux Security Update : spice-gtk on SL6.x i386/x86_64 (20130919)
2013-09-20 00:00:00
openvas
openvas
Fedora Update for spice-gtk FEDORA-2013-17109
2013-10-03 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17195
2013-12-23 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17109
2013-10-03 00:00:00
redhat
redhat
(RHSA-2013:1273) Important: spice-gtk security update
2013-09-19 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: spice-gtk-0.20-6.fc19
2013-09-27 00:45:25
[SECURITY] Fedora 18 Update: spice-gtk-0.18-3.fc18
2013-12-19 07:19:49
centos
centos
spice security update
2013-09-20 02:25:25
ubuntucve
ubuntucve
CVE-2013-4324
2013-10-03 00:00:00
nvd
nvd
CVE-2013-4324
2013-10-03 21:55:04
cve
cve
CVE-2013-4324
2013-10-03 21:55:04
debiancve
debiancve
CVE-2013-4324
2013-10-03 21:55:04
prion
prion
Race condition
2013-10-03 21:55:00
cvelist
cvelist
CVE-2013-4324
2013-10-03 21:00:00
ibm
ibm
mageia
mageia
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00