Vulnerability Description
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Usb-Creator Project | Usb-Creator | <= 0.2.38.3 |
| Canonical | Ubuntu Linux | 12.04 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2015/04/22/12Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2015/05/04/3Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/74304Third Party AdvisoryVDB Entry
- https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-1/Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-2/Third Party Advisory
- https://www.exploit-db.com/exploits/36820/ExploitThird Party AdvisoryVDB Entry
- http://www.openwall.com/lists/oss-security/2015/04/22/12Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2015/05/04/3Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/74304Third Party AdvisoryVDB Entry
- https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-1/Third Party Advisory
- https://usn.ubuntu.com/usn/usn-2576-2/Third Party Advisory
- https://www.exploit-db.com/exploits/36820/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-3643?
CVE-2015-3643 is a vulnerability with a CVSS score of 7.8 (HIGH). usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local ...
How severe is CVE-2015-3643?
CVE-2015-3643 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-3643?
Check the references section above for vendor advisories and patch information. Affected products include: Usb-Creator Project Usb-Creator, Canonical Ubuntu Linux.