CVEvulnerability
CVE-2015-3643
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
Affected configurations
• usb-creator project usb-creator (<= 0.2.38.3)
• usb-creator project usb-creator (<= 0.2.56.3)
• usb-creator project usb-creator (<= 0.2.62ubuntu0.2)
• usb-creator project usb-creator (<= 0.2.67)
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2015/04/22/12 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/05/04/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74304 Third Party Advisory, VDB Entry
- https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470 Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-1/ Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-2/ Third Party Advisory
- https://www.exploit-db.com/exploits/36820/ Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2015/04/22/12 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/05/04/3 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/74304 Third Party Advisory, VDB Entry
- https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470 Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-1/ Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-2/ Third Party Advisory
- https://www.exploit-db.com/exploits/36820/ Exploit, Third Party Advisory, VDB Entry