PT-2017-6688 · Canonical · Usb-Creator

Tavis Ormandy · Published 2015-04-23 · Updated 2017-10-11 · CVE-2015-3643

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions usb-creator versions prior to 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS usb-creator versions prior to 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS usb-creator versions prior to 0.2.62ubuntu0.3 on Ubuntu 14.10 usb-creator versions prior to 0.2.67ubuntu0.1 on Ubuntu 15.04

Description The issue allows local users to gain privileges by leveraging a missing call to check polkit for the KVMTest method.

Recommendations For usb-creator version prior to 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, update to version 0.2.38.3ubuntu0.1 or later. For usb-creator version prior to 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, update to version 0.2.56.3ubuntu0.1 or later. For usb-creator version prior to 0.2.62ubuntu0.3 on Ubuntu 14.10, update to version 0.2.62ubuntu0.3 or later. For usb-creator version prior to 0.2.67ubuntu0.1 on Ubuntu 15.04, update to version 0.2.67ubuntu0.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-3643

USN-2576-1

USN-2576-2

Affected Products

Usb-Creator

References · 15

• 🔥 https://exploit-db.com/exploits/36820 · Exploit
• https://ubuntu.com/security/CVE-2015-3643 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-3643 · Security Note
• https://usn.ubuntu.com/usn/usn-2576-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2576-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3643 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3643 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2576-1 · Vendor Advisory
• https://usn.ubuntu.com/usn/usn-2576-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2576-2 · Vendor Advisory
• https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470 · Note
• https://launchpad.net/bugs/1447396 · Note
• http://openwall.com/lists/oss-security/2015/05/04/3 · Note
• http://openwall.com/lists/oss-security/2015/04/22/12 · Note
• http://securityfocus.com/bid/74304 · Note