CVE-2013-4288 — Race Condition in Project Polkit

CWE-362 — Race Condition20 documents8 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 86.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Polkit Project PolkitCanonical Ubuntu LinuxOpensuse+1 more
Timeline
PublishedOct 3
Latest updateMay 13

Description

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDpolkit_project/polkit< 0.112.1
▶NVDopensuse/opensuse12.2, 12.3+1

Also affects: Ubuntu Linux 10.04, 12.04, 12.10, 13.04, Enterprise Linux 6.0

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-6wv7-fpg8-f44q: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkex↗2022-05-13
▶
CVEList
CVE-2013-4288: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkex↗2013-10-03
▶
OSV
CVE-2013-4288: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkex↗2013-10-03
▶

📋Vendor Advisories

8
Red Hat
polkit-qt: insecure calling of polkit↗2014-03-24
▶
Ubuntu
polkit vulnerability↗2013-09-18
▶
Red Hat
polkit: unix-process subject for authorization is racy↗2013-09-18
▶
Red Hat
spice-gtk: Insecure calling of polkit via polkit_unix_process_new()↗2013-09-18
▶
Red Hat
libvirt: insecure calling of polkit↗2013-09-18
▶

💬Community

8
Bugzilla
CVE-2014-5033 polkit-qt: insecure calling of polkit↗2014-05-06
▶
Bugzilla
CVE-2013-4288 polkit: unix-process subject for authorization is racy [fedora-all]↗2013-09-18
▶
Bugzilla
CVE-2013-4327 systemd: insecure calling of polkit↗2013-09-11
▶
Bugzilla
CVE-2013-4324 spice-gtk: Insecure calling of polkit via polkit_unix_process_new()↗2013-09-11
▶
Bugzilla
CVE-2013-4325 hplip: Insecure calling of polkit↗2013-09-11
▶
CVE-2013-4288 — Race Condition in Polkit Project Polkit | cvebase