CVE-2013-4327
03.10.2013, 21:55
systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
| Vendor | Product | Version |
|---|---|---|
| systemd_project | systemd | 𝑥 ≤ 207 |
| debian | debian_linux | 7.0 |
| canonical | ubuntu_linux | 13.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References