ktsuss versions 1.4 and prior spawns the GTK interface to run as root
published November 19, 2019
CVSS
—
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is
ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00684 · 51.7th percentile
Published
2019-11-19T18:08Z
EPSS history
Timeline
19 NOV 18:08Z
ktsuss versions 1.4 and prior spawns the GTK interface to run as root