296,213
Total vulnerabilities in the database
RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
| Software | From | Fixed in |
|---|---|---|
| lennart_poettering / rkit | 0.5 | 0.5.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |