Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."

Published

2013-10-28T22:55:03.850

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:H/Au:N/C:C/I:C/A:P

Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: PARTIAL

Exploitability Score

1.9

Impact Score

9.5

Weaknesses

Type: Primary
CWE-276

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	systemd_project	systemd	< 194	Yes
Operating System	debian	debian_linux	7.0	Yes

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 Issue Tracking, Third Party Advisory ([email protected])
http://www.debian.org/security/2013/dsa-2777 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2013/10/01/9 Mailing List, Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=862324 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://security.gentoo.org/glsa/201612-34 Third Party Advisory ([email protected])
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2013/dsa-2777 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/10/01/9 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=862324 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201612-34 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)