CVE-2013-4326 Race condition in n/a

Medium 4.6 Published 3 Oct 2013 Updated 6 Aug 2024

Local attackers can exploit a race condition in RealtimeKit's D-Bus communication to bypass access restrictions and escalate privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2013-4326?

CVE-2013-4326 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 3 Oct 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

Weakness: CWE-264

Which versions are affected by CVE-2013-4326?

It affects 2 products.

Linux distribution packages (9)

`rtkit` Red Hat:enterprise_linux:6::client	All versions	`0:0.5-2.el6_4`
`rtkit-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:0.5-2.el6_4`
`rtkit` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.5-2.el6_4`
`rtkit-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:0.5-2.el6_4`
`rtkit` Red Hat:enterprise_linux:6::server	All versions	`0:0.5-2.el6_4`
`rtkit-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:0.5-2.el6_4`
`rtkit` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.5-2.el6_4`
`rtkit-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:0.5-2.el6_4`
`rtkit` openSUSE:Tumbleweed	All versions	`0.11+git.20130926-3.1`

Products include Lennart Poettering Rkit, Redhat Enterprise Linux.

How do I fix CVE-2013-4326?

Apply the vendor's patch.

Is CVE-2013-4326 being exploited?

There is no known exploitation of CVE-2013-4326 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2013-4326, GHSA-63rr-v2vx-w3jw, RHSA-2013:1282, openSUSE-SU-2024:10557-1.