NVD

Id
39936  
Name
CVE-2013-4311  
Description
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-03  
Modified Date
2013-11-06  
Seq
2013-4311  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203161 39936 CVE-2013-4311 openSUSE-SU-2013:1549  View
203162 39936 CVE-2013-4311 openSUSE-SU-2013:1550  View
203163 39936 CVE-2013-4311 RHSA-2013:1272  View
203164 39936 CVE-2013-4311 RHSA-2013:1460  View
203165 39936 CVE-2013-4311 http://wiki.libvirt.org/page/Maintenance_Releases  View
203166 39936 CVE-2013-4311 [oss-security] 20130918 Re: Fwd: [vs-plain] polkit races  View
203167 39936 CVE-2013-4311 USN-1954-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22913 JVNDB-2013-004488 libvirt におけるアクセス制限を回避される脆弱性 libvirt には、アクセス制限を回避される脆弱性が存在します。 CVE-2013-4311 64253 CVE-2013-4311 39936 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004488.html 2013-09-19 2013-11-11 View