CVE-2014-5033

Name of the Vulnerable Software and Affected Versions polkit-qt versions 0.103.0 kdelibs versions prior to 4.14 kauth versions prior to 5.1

Description The issue allows local users to bypass intended access restrictions, potentially leading to a violation of confidentiality, integrity, and availability of protected information. This can be exploited locally. The problem is related to a PolkitUnixProcess PolkitSubject race condition via a setuid process or pkexec process.

Recommendations For polkit-qt version 0.103.0, update to a newer version that contains a fix for this issue. For kdelibs versions prior to 4.14, update to version 4.14 or later. For kauth versions prior to 5.1, update to version 5.1 or later. As a temporary workaround, consider restricting access to the polkit authority to minimize the risk of exploitation.