CVE-2013-4326HIGHCVSS 7.2fixed in rtkit 0.10-3 (bookworm)2013
CVE-2013-4326 [HIGH] CVE-2013-4326: rtkit - RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a...
RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Scope: local
bookworm: resolved (fixed in 0.10-3)
bullseye: reso
debian