CVE-2015-3643: High severity usb creator vulnerability
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call checkpolkit for the KVMTest method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3643?
CVE-2015-3643 is considered a medium severity vulnerability due to privilege escalation risks.
How do I fix CVE-2015-3643?
To fix CVE-2015-3643, update usb-creator to version 0.2.38.3 or later for Ubuntu 12.04, 0.2.56.3 or later for Ubuntu 14.04, 0.2.62 or later for Ubuntu 14.10, and 0.2.67 or later for Ubuntu 15.04.
Who is affected by CVE-2015-3643?
CVE-2015-3643 affects users of usb-creator versions prior to the specified updates on Ubuntu distributions.
What type of vulnerability is CVE-2015-3643?
CVE-2015-3643 is a local privilege escalation vulnerability due to a missing access control check.
Is CVE-2015-3643 exploitable remotely?
No, CVE-2015-3643 is not remotely exploitable and requires local access to the affected system.