CVEvulnerability
CVE-2013-4394
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.9 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:P
- Weaknesses
- CWE-276
Description
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Affected configurations
• systemd project systemd (< 194)
• debian debian linux 7.0
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 Issue Tracking, Third Party Advisory
- http://www.debian.org/security/2013/dsa-2777 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/10/01/9 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=862324 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201612-34 Third Party Advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 Issue Tracking, Third Party Advisory
- http://www.debian.org/security/2013/dsa-2777 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/10/01/9 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=862324 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201612-34 Third Party Advisory