CVE-2013-4311
03.10.2013, 21:55
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | libvirt | 0.9.12 |
| redhat | libvirt | 0.10.2 |
| redhat | libvirt | 0.10.2.1 |
| redhat | libvirt | 0.10.2.2 |
| redhat | libvirt | 0.10.2.3 |
| redhat | libvirt | 0.10.2.4 |
| redhat | libvirt | 0.10.2.5 |
| redhat | libvirt | 0.10.2.6 |
| redhat | libvirt | 0.10.2.7 |
| redhat | libvirt | 1.0.5 |
| redhat | libvirt | 1.0.5.1 |
| redhat | libvirt | 1.0.5.2 |
| redhat | libvirt | 1.0.5.3 |
| redhat | libvirt | 1.0.5.4 |
| redhat | libvirt | 1.0.5.5 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
| canonical | ubuntu_linux | 13.04 |
| redhat | enterprise_linux | 6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References