VDB

GCVE-VVD-MAGEIA-2017-274

GCVE-VVD-MAGEIA-2017-274
Advisory Published
Vulnetix · Advisory published August 16, 2017
Sebastian Krahmer from SUSE discovered that the KAuth framework contains a logic flaw in which the service invoking dbus is not properly checked. This flaw allows spoofing the identity of the caller and gaining root privileges from an unprivileged account (CVE-2017-8422).

Affected Products

VendorProductVersionsPlatforms
Mageiakauth0 (affected), 5.5.0-1.1.mga5 (unaffected)—
Mageiakdelibs40 (affected), 4.14.30-1.1.mga5 (unaffected)—

Browse GCVE Records

745 records in the GCVE database · Updated November 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›