CVE

Id
64258  
CVE No.
CVE-2013-4311  
Status
Candidate  
Description
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633881 64258 CVE-2013-4311 MLIST:[oss-security] 20130918 Re: Fwd: [vs-plain] polkit races  View
633882 64258 CVE-2013-4311 URL:http://www.openwall.com/lists/oss-security/2013/09/18/6  View
633883 64258 CVE-2013-4311 CONFIRM:http://wiki.libvirt.org/page/Maintenance_Releases  View
633884 64258 CVE-2013-4311 REDHAT:RHSA-2013:1272  View
633885 64258 CVE-2013-4311 URL:http://rhn.redhat.com/errata/RHSA-2013-1272.html  View
633886 64258 CVE-2013-4311 REDHAT:RHSA-2013:1460  View
633887 64258 CVE-2013-4311 URL:http://rhn.redhat.com/errata/RHSA-2013-1460.html  View
633888 64258 CVE-2013-4311 SUSE:openSUSE-SU-2013:1549  View
633889 64258 CVE-2013-4311 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00023.html  View
633890 64258 CVE-2013-4311 SUSE:openSUSE-SU-2013:1550  View
633891 64258 CVE-2013-4311 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00024.html  View
633892 64258 CVE-2013-4311 UBUNTU:USN-1954-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22797 JVNDB-2013-004372 Apache Struts における脆弱性 Apache Struts は、デフォルトで Dynamic Method Invocation が有効であるため、不特定の影響を受ける脆弱性が存在します。 CVE-2013-4316 64258 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004372.html  View