Every CVE Search/ Get API key

CVE-2013-4288

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...

7.2 HighFix available

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Exploit likelihood

0.34%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
CVE-2013-4288
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
CVE-2013-4288
Updated
2026-11-02
EUVDEUVD-2013-4184 No score

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
EUVD-2013-4184
Updated
2026-11-03
GitHub AdvisoriesGHSA-6wv7-fpg8-f44q No score

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
GHSA-6wv7-fpg8-f44q
Weakness
CWE-362
Updated
2026-11-02
OSV No score

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
CVE-2013-4288
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4288 No score

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Record
DEBIAN-CVE-2013-4288
Updated
2026-11-02
OSVMGASA-2013-0293 No score

Updated polkit package and the packages that call polkit fixes security vulnerability

A race condition was found in the way the PolicyKit pkcheck utility checked process authorization when the process was specified by its process ID via the --process option. A local user could use this flaw to bypass intended PolicyKit authorizations and escalate their privileges (CVE-2013-4288).

Note: Applications that invoke pkcheck with the --process option need to be modified to use the pid,pid-start-time,uid argument for that option, to allow pkcheck to check process authorization correctly.

Because of the change in the PolicyKit API, the spice-gtk (CVE-2013-4324), hplip (CVE-2013-4325), rtkit (CVE-2013-4326), and systemd (CVE-2013-4327) packages have been updated to use a different API that is not affected by this PolicyKit vulnerability. The libvirt package will also be updated for the same reason, but this update will come in a separate advisory.

Record
MGASA-2013-0293
Updated
2026-11-02
OSVopenSUSE-SU-2024:10356-1 No score

libsystemd0-228-17.1 on GA media

These are all security issues fixed in the libsystemd0-228-17.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10356-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10436-1 No score

libpolkit0-0.113-3.4 on GA media

These are all security issues fixed in the libpolkit0-0.113-3.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10436-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
policykit-1
Debian:12
 before 0.105-3+nmu1
0.105-3+nmu1
policykit-1
Debian:13
 before 0.105-3+nmu1
0.105-3+nmu1
policykit-1
Debian:14
 before 0.105-3+nmu1
0.105-3+nmu1
polkit
Mageia:2
From an advisory covering 5 CVEs
 before 0.104-4.2.mga2
0.104-4.2.mga2
spice-gtk
Mageia:2
From an advisory covering 5 CVEs
 before 0.9-1.2.mga2
0.9-1.2.mga2
hplip
Mageia:2
From an advisory covering 5 CVEs
 before 3.12.4-1.3.mga2
3.12.4-1.3.mga2
rtkit
Mageia:2
From an advisory covering 5 CVEs
 before 0.10-3.1.mga2
0.10-3.1.mga2
systemd
Mageia:2
From an advisory covering 5 CVEs
 before 44-13.1.mga2
44-13.1.mga2
polkit
Mageia:3
From an advisory covering 5 CVEs
 before 0.107-6.1.mga3
0.107-6.1.mga3
spice-gtk
Mageia:3
From an advisory covering 5 CVEs
 before 0.15-3.1.mga3
0.15-3.1.mga3
Show 24 moreShow less
Affected packages
PackageAffectedFixed
hplip
Mageia:3
From an advisory covering 5 CVEs
 before 3.12.9-6.1.mga3
3.12.9-6.1.mga3
rtkit
Mageia:3
From an advisory covering 5 CVEs
 before 0.11-3.1.mga3
0.11-3.1.mga3
systemd
Mageia:3
From an advisory covering 5 CVEs
 before 195-22.1.mga3
195-22.1.mga3
polkit
Red Hat:enterprise_linux:6::client
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-desktop-policy
Red Hat:enterprise_linux:6::client
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-devel
Red Hat:enterprise_linux:6::client
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-docs
Red Hat:enterprise_linux:6::client
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit
Red Hat:enterprise_linux:6::computenode
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-desktop-policy
Red Hat:enterprise_linux:6::computenode
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-docs
Red Hat:enterprise_linux:6::computenode
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit
Red Hat:enterprise_linux:6::server
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-desktop-policy
Red Hat:enterprise_linux:6::server
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-devel
Red Hat:enterprise_linux:6::server
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-docs
Red Hat:enterprise_linux:6::server
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit
Red Hat:enterprise_linux:6::workstation
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-desktop-policy
Red Hat:enterprise_linux:6::workstation
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
polkit-docs
Red Hat:enterprise_linux:6::workstation
 before 0:0.96-5.el6_4
0:0.96-5.el6_4
systemd
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 228-17.1
228-17.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4288 is a high vulnerability (CVSS 7.2) in Polkit Project Polkit, published October 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in policykit-1 0.105-3+nmu1.

References

Show 28 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open