CVE-2015-3643
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
Affected (4)
Products: Usb Creator Project: Usb Creator
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 0.2.38.3 |
| Running on/with | Platform Versions |
|---|---|
Canonical Ubuntu Linux | Version 12.04 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 0.2.56.3 |
| Running on/with | Platform Versions |
|---|---|
Canonical Ubuntu Linux | Version 14.04 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 0.2.62ubuntu0.2 |
| Running on/with | Platform Versions |
|---|---|
Canonical Ubuntu Linux | Version 14.10 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 0.2.67 |
| Running on/with | Platform Versions |
|---|---|
Canonical Ubuntu Linux | Version 15.04 |
Related CWEs
References (14)
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Timeline
No history available yet.