| Package | Affected versions | Patched versions |
|---|---|---|
| software-properties | = 0.82.7= 0.82.7.1= 0.82.7.2= 0.82.7.3= 0.82.7.4= 0.92.17= 0.92.17.1= 0.92.17.2= 0.92.9= 0.92.9.1= 0.92.9.2 |
dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free