CVE-2013-4394: Debian Linux

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters."

Affected products

• Debian Debian Linux: version 7.0 only
• Systemd Project Systemd: before 194 (fixed in 194)

Published 2013-10-28. Last modified 2026-06-16.