{"id":"CVE-2014-0484","aliases":["DEBIAN-CVE-2014-0484","DLA-49-1","DSA-3020-1","EUVD-2014-0515","GHSA-r5gj-rr35-rhjc"],"status":"published","title":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via...","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00373,"percentile":0.3151,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2014-09-10T00:00:00Z","modified":"2026-10-23T15:47:26Z","fixes":[{"ecosystem":"Debian:12","package":"acpi-support","fixed_in":["0.142-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"acpi-support","fixed_in":["0.142-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"acpi-support","fixed_in":["0.142-4"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"acpi-support","fixed_in":["0.137-5+deb6u2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"acpi-support","fixed_in":["0.140-5+deb7u3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"acpi-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.142-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"acpi-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.142-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"acpi-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.142-4"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"acpi-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.137-5+deb6u2"}]}],"versions":["0.137-5"]},{"source":"osv","ecosystem":"Debian:7","package":"acpi-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.140-5+deb7u3"}]}],"versions":["0.140-5","0.140-5+deb7u1","0.140-5+deb7u2"]}],"products":[{"vendor":"canonical","product":"acpi-support"}],"references":[{"url":"http://www.debian.org/security/2014/dsa-3020","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/61084","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0484"},{"url":"https://github.com/advisories/GHSA-r5gj-rr35-rhjc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-0484","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0484","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2014-09-22T15:00:00Z","modified":"2024-08-06T09:20:18.438Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0515","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2014-09-22T15:00:00Z","modified":"2024-08-06T09:20:18Z","updated_at":"2026-11-03T01:57:21.099925Z"}],"ghsa":[{"id":"GHSA-r5gj-rr35-rhjc","title":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via...","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2022-05-17T04:33:11Z","modified":"2023-01-28T05:01:57Z","updated_at":"2026-11-02T14:43:40.735861Z"}],"nvd":[{"id":"CVE-2014-0484","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2014-09-22T15:55:07.373Z","modified":"2026-06-17T00:03:07.77Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:55.884979Z"}],"osv":[{"id":"CVE-2014-0484","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2014-09-22T15:55:07Z","modified":"2026-04-10T03:43:34.144852Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-0484","description":"The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the \"user's environment.\"","status":"published","published":"2014-09-22T15:55:07.373Z","modified":"2026-10-23T15:47:26.978386221Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DLA-49-1","title":"acpi-support - security update","status":"published","published":"2014-09-17T00:00:00Z","modified":"2026-03-09T02:08:45.15033Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3020-1","title":"acpi-support - security update","status":"published","published":"2014-09-10T00:00:00Z","modified":"2026-03-09T01:21:34.392052Z","updated_at":"2026-11-02T15:46:15.843838Z"}]}}