Vulnetix
Try Vulnetix Request Demo
CVE-2014-5033 PUBLISHED

KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."

EPSS 0.03% · 9.8th percentile

Risk Scores

EPSS Score
0.03%
9.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSkde4libs0, 4:4.11.2-0ubuntu2, 4:4.11.2-0ubuntu3

Timeline

References

Open in Interactive Console →