Approved changes feed: RSS · Atom

cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.2:*:*:*:*:*:*:*

part: a version: 0.82.7.2 update: *

VendorMarc Deslauriers (ce3ebe25-8548-5857-99d0-3c494227d186)
ProductSoftware Properties (1027d695-6eed-5f46-ade6-5b54caee195d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/software-properties purl2cpe 2026-06-01 10:15:44.238889
pkg:deb/ubuntu/software-properties purl2cpe 2026-06-01 10:15:44.238890

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1061 vulnerable 2026-06-08 05:03:52.334159 Details available
dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Published: 2013-10-03T21:00:00.000Z
Updated: 2024-08-06T14:49:20.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.