artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade kde-base/arts.Upgrade media-sound/beast. | Oct 30, 2017 | Jun 15, 2006 |
| Suse | — | Upgrade perl-SNMPUpgrade mysqlUpgrade qt3-devel-64bitUpgrade qt3-mysql-64bitUpgrade esound-x86Upgrade qt3-develUpgrade qt3-examplesUpgrade kdebase3-nspluginUpgrade kdelibs3-arts-32bitUpgrade fontconfigUpgrade net-snmp-devel-64bitUpgrade arts-gmcopUpgrade kdelibs3-arts-x86Upgrade fontconfig-devel-32bitUpgrade kdelibs3-32bitUpgrade esound-develUpgrade qt3-manUpgrade qt3Upgrade mysql-shared-64bitUpgrade fontconfig-develUpgrade qt3-unixODBC-64bitUpgrade mysql-MaxUpgrade qt3-32bitUpgrade kdebase3-kdmUpgrade libwnck-64bitUpgrade mysql-shared-x86Upgrade qt3-unixODBCUpgrade gtk-x86Upgrade libwnck-develUpgrade fontconfig-devel-64bitUpgrade net-snmp-32bitUpgrade kdelibs3-docUpgrade kdebase3-64bitUpgrade mysql-clientUpgrade gtk-develUpgrade esound-32bitUpgrade arts-64bitUpgrade fontconfig-64bitUpgrade kdelibs3Upgrade libwnck-x86Upgrade arts-x86Upgrade kdebase3-32bitUpgrade artsUpgrade kdebase3-x86Upgrade kdebase3-sessionUpgrade kdelibs3-64bitUpgrade net-snmp-64bitUpgrade qt3-postgresql-64bitUpgrade gtkUpgrade mysql-shared-32bitUpgrade net-snmpUpgrade kdebase3-develUpgrade arts-32bitUpgrade kdeutils3-extraUpgrade qt3-postgresqlUpgrade kdebase3-extraUpgrade gtk-64bitUpgrade fontconfig-x86Upgrade qt3-x86Upgrade qt3-devel-docUpgrade kdeutils3-laptopUpgrade esound-64bitUpgrade fontconfig-32bitUpgrade mysql-sharedUpgrade qt3-devel-32bitUpgrade qt3-devel-tools-64bitUpgrade net-snmp-x86Upgrade net-snmp-develUpgrade kdebase3-sambaUpgrade mysql-develUpgrade kdelibs3-devel-docUpgrade qt3-extensionsUpgrade qt3-devel-toolsUpgrade qt3-64bitUpgrade qt3-mysqlUpgrade gnokiiUpgrade kdelibs3-develUpgrade kdebase3-ksysguarddUpgrade kdelibs3-arts-64bitUpgrade esoundUpgrade icecream-monitorUpgrade libwnck-32bitUpgrade filesharesetUpgrade gtk-32bitUpgrade kdebase3-nsplugin64Upgrade arts-develUpgrade kdelibs3-x86Upgrade kdeutils3Upgrade libwnckUpgrade kdebase3Upgrade kdelibs3-artsUpgrade kdeutils3-devel | Feb 17, 2015 | Jun 15, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub