CVE-2014-8148

Опубликовано: 26 янв. 2015

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.

Ссылки

http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/05/2
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/05/2
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:midgard-project:midgard2:10.05.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00071

Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-8148

ubuntu

около 11 лет назад

CVE-2014-8148

debian

около 11 лет назад

The default D-Bus access control rule in Midgard2 10.05.7.1 allows loc ...

GHSA-cm3g-4xfr-2wg8

github

больше 3 лет назад

EPSS

Процентиль: 22%

0.00071

Низкий

7.2 High

CVSS2

Дефекты

CWE-264