Strix
26.1K

CVE-2013-0292

UnknownEPSS 1.09%

Last modified

CVE-2013-0292 is a vulnerability of currently unknown severity. The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.

Description

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.

Metrics

EPSS Probability
1.09%

61.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
FreedesktopDbus-Glib<= 0.100
FreedesktopDbus-Glib0.72
FreedesktopDbus-Glib0.73
FreedesktopDbus-Glib0.74
FreedesktopDbus-Glib0.76
FreedesktopDbus-Glib0.78
FreedesktopDbus-Glib0.80
FreedesktopDbus-Glib0.82
FreedesktopDbus-Glib0.84
FreedesktopDbus-Glib0.86
FreedesktopDbus-Glib0.88
FreedesktopDbus-Glib0.90
FreedesktopDbus-Glib0.92
FreedesktopDbus-Glib0.94
FreedesktopDbus-Glib0.96
FreedesktopDbus-Glib0.98

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-0292?
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
How severe is CVE-2013-0292?
Severity scoring for CVE-2013-0292 is pending analysis. The EPSS model estimates a 1.09% probability of exploitation in the next 30 days.
How do I fix CVE-2013-0292?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-0292?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST