CVE-2013-4394
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change...
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Exploit likelihood
What each source reports
NVD Score used
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
CVE-2013-4394- CVSS 2.0
- 5.9 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:P - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List No score
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
CVE-2013-4394- Updated
- 2026-11-02
EUVDEUVD-2013-4273 No score
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
EUVD-2013-4273- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9f9x-pxgv-c6qg No score
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change...
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
GHSA-9f9x-pxgv-c6qg- Weakness
- CWE-276
- Updated
- 2026-11-02
OSV No score
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
CVE-2013-4394- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4394 No score
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
- Record
DEBIAN-CVE-2013-4394- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4394 is a medium vulnerability (CVSS 5.9) in Systemd Project Systemd, published October 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in systemd 204-5.
References
security.gentoo.org/glsa/201612-34
bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357
bugzilla.redhat.com/show_bug.cgi?id=862324
debian.org/security/2013/dsa-2777
openwall.com/lists/oss-security/2013/10/01/9
nvd.nist.gov/vuln/detail/CVE-2013-4394
github.com/advisories/GHSA-9f9x-pxgv-c6qg
security-tracker.debian.org/tracker/CVE-2013-4394