Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat PolicyKit和kauth 权限许可和访问控制漏洞
Vulnerability Description
KDE KDELibs和kauth都是KDE社区的产品。KDELibs是一个创建在Qt框架之上用于开发KDE软件的KDE API参考库；kauth是一个跨平台的认证API。 KDE kdelibs 4.14之前版本和kauth 5.1版本中存在安全漏洞，该漏洞源于程序以不安全的方式使用polkit。本地攻击者可通过PolkitUnixProcess PolkitSubject竞争条件利用该漏洞绕过既定的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A