CVE-2015-3643
First published: Wed Sep 27 2017(Updated: )
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| USB Creator | <=0.2.38.3 | |
| Ubuntu | =12.04 | |
| USB Creator | <=0.2.56.3 | |
| Ubuntu | =14.04 | |
| USB Creator | <=0.2.62ubuntu0.2 | |
| Ubuntu | =14.10 | |
| USB Creator | <=0.2.67 | |
| Ubuntu | =15.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2015/04/22/12
- http://www.openwall.com/lists/oss-security/2015/05/04/3
- http://www.securityfocus.com/bid/74304
- https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470
- https://usn.ubuntu.com/usn/usn-2576-1/
- https://usn.ubuntu.com/usn/usn-2576-2/
- https://www.exploit-db.com/exploits/36820/
Frequently Asked Questions
What is the severity of CVE-2015-3643?
CVE-2015-3643 is considered a medium severity vulnerability due to privilege escalation risks.
How do I fix CVE-2015-3643?
To fix CVE-2015-3643, update usb-creator to version 0.2.38.3 or later for Ubuntu 12.04, 0.2.56.3 or later for Ubuntu 14.04, 0.2.62 or later for Ubuntu 14.10, and 0.2.67 or later for Ubuntu 15.04.
Who is affected by CVE-2015-3643?
CVE-2015-3643 affects users of usb-creator versions prior to the specified updates on Ubuntu distributions.
What type of vulnerability is CVE-2015-3643?
CVE-2015-3643 is a local privilege escalation vulnerability due to a missing access control check.
Is CVE-2015-3643 exploitable remotely?
No, CVE-2015-3643 is not remotely exploitable and requires local access to the affected system.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/usb-creator project
- canonical/usb creator
- version/usb creator/0.2.38.3
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/12.04
- version/usb creator/0.2.56.3
- version/ubuntu/14.04
- version/usb creator/0.2.62ubuntu0.2
- version/ubuntu/14.10
- version/usb creator/0.2.67
- version/ubuntu/15.04