CVE-2013-4327

Fixed in a distro release EPSS <1%

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

Published 2013-10-03 · CVE record · OSV

Products: systemd_project systemd, debian_linux, canonical ubuntu_linux

Distro releases