CVE-2013-4311
Published Oct 3, 2013
Last updated 6 years ago
Overview
- Description
- libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.9.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78C18997-7086-4BB0-8490-EDB5394951F6"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C433B92-DE77-4B44-BE9D-98449FC7BF1B"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28132532-C0C7-4EAE-ADAE-3ADA58AE2EC0"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DA73633-136A-422F-AF77-2C29224C6981"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6310759E-ADFB-4DF4-8D10-4DDC42D29AE2"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E2B1536-6671-4508-BC7D-6F11408B3CF0"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA7D7BAB-A2EC-4DD9-A7B8-D5806CD5F306"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94E85C10-0192-46B4-828D-52BAE6A6F69C"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:0.10.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52AF89AC-A906-479F-85AA-E9D47A83778F"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67B77F63-C9AC-42D4-B9E2-4BBE196AC254"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3256288E-5A49-4DCD-AE30-6B4E21AEF970"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25E764AE-3B7C-4378-97C5-10E835511684"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49FEFFA5-371E-4B1D-AAAE-C71AEB79A4AF"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F982F65C-CBF9-4EE6-8FD6-C965141E42C9"
},
{
"criteria": "cpe:2.3:a:redhat:libvirt:1.0.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4BF8152-79A4-48C6-88EB-9D3FA7466844"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7118F616-25CA-4E34-AA13-4D14BB62419F"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D324C4-97C7-49D3-A809-9EAD4B690C69"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFAA48D9-BEB4-4E49-AD50-325C262D46D9"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
}
],
"operator": "OR"
}
]
}
]