CVE-2013-4394
published 2013-10-28CVE-2013-4394: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts…
PriorityP419medium5.9CVSS 2.0
AVLACHAuNCCICAP
EPSS
0.34%
26.1th percentile
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | systemd | < systemd 204-5 (bookworm) | systemd 204-5 (bookworm) |
| systemd_project | systemd | < 194 | 194 |
| systemd_project | systemd | >= 0 < 204-5 | 204-5 |
| systemd_project | systemd | >= 0 < 204-5 | 204-5 |
| systemd_project | systemd | >= 0 < 204-5 | 204-5 |
| systemd_project | systemd | >= 0 < 204-5 | 204-5 |
CVSS provenance
nvdv2.05.9MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:P
osv5.9MEDIUM
vendor_debian5.9MEDIUM
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
systemd: Improper sanitization of invalid XKB layouts descriptions (privilege escalation when custom PolicyKit local authority file used)
vendor_redhat·2013-09-23·CVSS 5.9
CVE-2013-4394 [MEDIUM] systemd: Improper sanitization of invalid XKB layouts descriptions (privilege escalation when custom PolicyKit local authority file used)
systemd: Improper sanitization of invalid XKB layouts descriptions (privilege escalation when custom PolicyKit local authority file used)
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Package: systemd (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-4394: systemd - The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is...
vendor_debian·2013·CVSS 5.9
CVE-2013-4394 [MEDIUM] CVE-2013-4394: systemd - The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is...
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Scope: local
bookworm: resolved (fixed in 204-5)
bullseye: resolved (fixed in 204-5)
forky: resolved (fixed in 204-5)
sid: resolved (fixed in 204-5)
trixie: resolved (fixed in 204-5)
GHSA
GHSA-9f9x-pxgv-c6qg: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB
ghsa_unreviewed·2022-05-13
CVE-2013-4394 [MEDIUM] CWE-276 GHSA-9f9x-pxgv-c6qg: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
OSV
CVE-2013-4394: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB
osv·2013-10-28·CVSS 5.9
CVE-2013-4394 [MEDIUM] CVE-2013-4394: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
No detection rules found.
No public exploits indexed.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357http://www.debian.org/security/2013/dsa-2777http://www.openwall.com/lists/oss-security/2013/10/01/9https://bugzilla.redhat.com/show_bug.cgi?id=862324https://security.gentoo.org/glsa/201612-34http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357http://www.debian.org/security/2013/dsa-2777http://www.openwall.com/lists/oss-security/2013/10/01/9https://bugzilla.redhat.com/show_bug.cgi?id=862324https://security.gentoo.org/glsa/201612-34
2013-10-28
Published