CVE-2011-2922

Опубликовано: 19 нояб. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.

Ссылки

https://access.redhat.com/security/cve/cve-2011-2922
Broken Link
https://lwn.net/Articles/477678/
Third Party Advisory
https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2011-2922
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2011-2922
Third Party Advisory
https://snyk.io/vuln/SNYK-LINUX-KTSUSS-174466
Third Party Advisory
https://www.securityfocus.com/bid/49151
Third Party Advisory
VDB Entry
https://access.redhat.com/security/cve/cve-2011-2922
Broken Link
https://lwn.net/Articles/477678/
Third Party Advisory
https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2011-2922
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2011-2922
Third Party Advisory
https://snyk.io/vuln/SNYK-LINUX-KTSUSS-174466
Third Party Advisory
https://www.securityfocus.com/bid/49151
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ktsuss_project:ktsuss:*:*:*:*:*:*:*:*

Версия до 1.4 (включая)

EPSS

Процентиль: 36%

0.00148

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-2922

CVSS3: 7.8

ubuntu

около 6 лет назад

CVE-2011-2922

CVSS3: 7.8

debian

около 6 лет назад

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. ...

GHSA-cwqm-g264-pf82

CVSS3: 7.8

github

почти 4 года назад

EPSS

Процентиль: 36%

0.00148

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20