ISOMAN

CVE

CVE-2015-3643

usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2015/04/22/12
  2. http://www.openwall.com/lists/oss-security/2015/05/04/3
  3. http://www.securityfocus.com/bid/74304
  4. https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470
  5. https://usn.ubuntu.com/usn/usn-2576-1/
  6. https://usn.ubuntu.com/usn/usn-2576-2/
  7. https://www.exploit-db.com/exploits/36820/
  8. http://www.openwall.com/lists/oss-security/2015/04/22/12
  9. http://www.openwall.com/lists/oss-security/2015/05/04/3
  10. http://www.securityfocus.com/bid/74304
  11. https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470
  12. https://usn.ubuntu.com/usn/usn-2576-1/
  13. https://usn.ubuntu.com/usn/usn-2576-2/
  14. https://www.exploit-db.com/exploits/36820/