VULNERABILITY INTELLIGENCE

CVE-2013-4394

CVSS score5.9 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2013-10-28
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:P

Description

The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references