Skip to content
OpenAdvisories
Unscored CVE-2017-7572 EUVD-2017-16577GHSA-gq8h-7hr7-25cg

The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authori…

Published Apr 6, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 backintime 1.1.12-2 —
Debian 13 backintime 1.1.12-2 —
Debian 12 backintime 1.1.12-2 —

References