Security Advisory

CVE-2011-2922

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-19 18:08:30

Last updated 2024-08-06 23:15:32

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.

← Browse all CVEs View on cve.org ↗