CVE-2013-1061

MEDIUM 4.6CVE-2013-1061 · Published 03/10/2013 · updated 16/06/2026

In short

CVE-2013-1061 is a MEDIUM (CVSS 4.6) vulnerability affecting software-properties (marc deslauriers).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
software-properties marc_deslauriers	`= 0.82.7= 0.82.7.1= 0.82.7.2= 0.82.7.3= 0.82.7.4= 0.92.17= 0.92.17.1= 0.92.17.2= 0.92.9= 0.92.9.1= 0.92.9.2`	No fix yet

Description

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free