{"id":"CVE-2015-3643","aliases":["EUVD-2015-3681","GHSA-xg32-vp89-8jq5","UBUNTU-CVE-2015-3643"],"status":"published","title":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14...","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0153,"percentile":0.74911,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2017-09-27T15:00:00Z","modified":"2026-06-17T00:26:01Z","exploits":[{"source":"exploitdb","id":"EDB-36820","title":"usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) - Local Privilege Escalation","type":"local","platform":"linux","date":"2015-04-23","url":"https://www.exploit-db.com/exploits/36820"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"usb-creator","fixed_in":["0.2.56.3ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"usb-creator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.56.3ubuntu0.1"}]}],"versions":["0.2.50","0.2.51","0.2.52","0.2.53","0.2.54","0.2.55","0.2.56","0.2.56.1","0.2.56.2","0.2.56.3"]}],"products":[{"vendor":"usb-creator_project","product":"usb-creator"}],"references":[{"url":"https://usn.ubuntu.com/usn/usn-2576-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/36820/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/04/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","report"]},{"url":"https://usn.ubuntu.com/usn/usn-2576-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/74304","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2015/04/22/12","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3643"},{"url":"https://usn.ubuntu.com/usn/usn-2576-1"},{"url":"https://usn.ubuntu.com/usn/usn-2576-2"},{"url":"https://www.exploit-db.com/exploits/36820"},{"url":"https://github.com/advisories/GHSA-xg32-vp89-8jq5"},{"url":"https://ubuntu.com/security/CVE-2015-3643","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2576-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2576-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3643","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3643","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","status":"published","published":"2017-09-27T15:00:00Z","modified":"2024-08-06T05:47:57.792Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3681","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","status":"published","published":"2017-09-27T15:00:00Z","modified":"2024-08-06T05:47:57Z","updated_at":"2026-11-03T02:22:07.516949Z"}],"ghsa":[{"id":"GHSA-xg32-vp89-8jq5","title":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14...","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","status":"published","published":"2022-05-17T00:33:42Z","modified":"2025-04-20T03:45:57Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:01:52.186588Z"}],"nvd":[{"id":"CVE-2015-3643","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","status":"published","published":"2017-09-28T01:29:00.59Z","modified":"2026-06-17T00:26:01.983Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:19.244941Z"}],"osv":[{"id":"UBUNTU-CVE-2015-3643","description":"usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.","status":"published","published":"2017-09-28T01:29:00Z","modified":"2026-02-04T03:46:45.42409Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:10.045446Z"}]}}