Race condition - CVE-2013-4288
Published: October 4, 2013 / Updated: August 4, 2020
Vulnerability identifier: #VU33401
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-4288
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local non-authenticated attacker to execute arbitrary code.
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Affected software
polkit (Alpine package)
linux-firmware (Alpine package)
linux-firmware (Alpine package)
How to mitigate CVE-2013-4288
Install update from vendor's website.
polkit (Alpine package) - addressed in versions 0.105-r1, 0.105-r2
linux-firmware (Alpine package) - update to 20180615-r2
linux-firmware (Alpine package) - update to 20180615-r2
External References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2013-1270.html
- http://rhn.redhat.com/errata/RHSA-2013-1460.html
- http://seclists.org/oss-sec/2013/q3/626
- http://www.openwall.com/lists/oss-security/2013/09/18/4
- http://www.ubuntu.com/usn/USN-1953-1