CVE-2013-4394 Privilege escalation in n/a
Local users in a specific group can modify Xorg configuration files to potentially gain elevated privileges when PolicyKit is configured to manage XKB permissions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-4394?
CVE-2013-4394 is a medium-severity vulnerability in Debian Debian Linux, published on 28 Oct 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Weakness: CWE-276
Which versions are affected by CVE-2013-4394?
It affects 2 products.
Products include Debian Debian Linux, Systemd Project Systemd.
How do I fix CVE-2013-4394?
Apply the vendor's patch.
Is CVE-2013-4394 being exploited?
There is no known exploitation of CVE-2013-4394 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2013-4394, GHSA-9f9x-pxgv-c6qg.