CVE Feed

    Dashboard / CVE / CVE-2014-1422

    CVE-2014-1422

    In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in src/core/trust/impl/sqlite3/store.cpp. Fixed in trust-store (Ubuntu) version 1.1.0+15.04.20150123-0ubuntu1 and trust-store (Ubuntu RTM) version 1.1.0+15.04.20150123~rtm-0ubuntu1.

    Published:Jul 22, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 22, 2020
    EPSS Score:0.00042
    CVSS Score:5

    Affected Products

    Vendor
    Canonical
    Product
    Trust-store \(ubuntu\)
    Vendor
    Canonical
    Product
    Trust-store \(ubuntu Rtm\)

    Exploits

    https://launchpad.net/bugs/1387734https://launchpad.net/bugs/1387734

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High