CVE-2013-4394

Name	CVE-2013-4394
Description	The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-2777-1
Debian Bugs	725357

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
systemd (PTS)	buster	241-7~deb10u8	fixed
	buster (security)	241-7~deb10u10	fixed
	bullseye	247.3-7+deb11u4	fixed
	bookworm	252.22-1~deb12u1	fixed
	sid, trixie	255.4-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
systemd	source	wheezy	44-11+deb7u4		DSA-2777-1
systemd	source	(unstable)	204-5			725357

https://bugzilla.redhat.com/show_bug.cgi?id=862324
http://cgit.freedesktop.org/systemd/systemd/commit/?id=0b507b17a760b21e33fc52ff377db6aa5086c680