{"id":"CVE-2012-4425","aliases":["DEBIAN-CVE-2012-4425","EUVD-2012-4360","GHSA-c77h-vm5q-jc2m","RHSA-2012:1284","openSUSE-SU-2024:10421-1"],"status":"published","title":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products...","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01093,"percentile":0.65652,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2012-09-18T17:00:00Z","modified":"2026-10-23T17:47:43Z","exploits":[{"source":"exploitdb","id":"EDB-21323","title":"libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation","type":"local","platform":"linux","date":"2012-07-17","url":"https://www.exploit-db.com/exploits/21323"}],"fixes":[{"ecosystem":"Debian:12","package":"spice-gtk","fixed_in":["0.12-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"spice-gtk","fixed_in":["0.12-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spice-gtk","fixed_in":["0.12-5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-debuginfo","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-python","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-tools","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-debuginfo","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-python","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-tools","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-debuginfo","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-python","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-tools","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-debuginfo","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-python","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-devel","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-tools","fixed_in":["0:0.11-11.el6_3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"spice-gtk","fixed_in":["0.33-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"spice-gtk-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11-11.el6_3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spice-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.33-2.1"}]}]}],"products":[{"vendor":"freedesktop","product":"spice-gtk"},{"vendor":"gtk","product":"libgio"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-1284.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/09/12/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.spinics.net/lists/spice-devel/msg01940.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2012/09/17/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://permalink.gmane.org/gmane.linux.redhat.fedora.extras.cvs/853051","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://www.exploit-db.com/exploits/21323","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","evidence"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857283","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/09/14/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/55555","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4425","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c77h-vm5q-jc2m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-4425","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1284","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1284.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4425","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4425","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-4425","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2012-09-18T17:00:00Z","modified":"2024-08-06T20:35:09.731Z","updated_at":"2026-11-02T14:34:51.937988Z"}],"euvd":[{"id":"EUVD-2012-4360","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2012-09-18T17:00:00Z","modified":"2024-08-06T20:35:09Z","updated_at":"2026-11-03T01:56:07.912368Z"}],"ghsa":[{"id":"GHSA-c77h-vm5q-jc2m","title":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products...","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2022-05-17T05:19:30Z","modified":"2023-01-28T05:03:45Z","updated_at":"2026-11-02T14:44:02.530855Z"}],"nvd":[{"id":"CVE-2012-4425","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2012-09-18T17:55:08.02Z","modified":"2026-06-16T23:44:59.633Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:15.643902Z"}],"osv":[{"id":"CVE-2012-4425","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2012-09-18T17:55:08Z","modified":"2026-04-10T03:42:28.378533Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-4425","description":"libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: it could be argued that this is a vulnerability in the applications that do not cleanse environment variables, not in libgio itself.","status":"published","published":"2012-09-18T17:55:08.02Z","modified":"2026-10-23T17:47:43.689709413Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"openSUSE-SU-2024:10421-1","title":"libspice-client-glib-2_0-8-0.33-2.1 on GA media","description":"These are all security issues fixed in the libspice-client-glib-2_0-8-0.33-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:11.679656Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2012:1284","title":"Red Hat Security Advisory: spice-gtk security update","status":"published","published":"2024-09-15T20:16:57Z","modified":"2026-06-26T12:21:43.209933098Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}