CVE-2015-3218 — Project Polkit vulnerability

10 documents8 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 67.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Polkit Project Polkit
Timeline
PublishedOct 26
Latest updateMay 14

Description

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

4
GHSA
GHSA-q9cc-g5q2-4hhx: The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority↗2022-05-14
▶
OSV
policykit-1 vulnerabilities↗2018-07-16
▶
OSV
CVE-2015-3218: The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority↗2015-10-26
▶
CVEList
CVE-2015-3218: The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority↗2015-10-26
▶

📋Vendor Advisories

3
Ubuntu
PolicyKit vulnerabilities↗2018-07-16
▶
Red Hat
polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent↗2015-05-29
▶
Debian
CVE-2015-3218: policykit-1 - The authentication_agent_new function in polkitbackend/polkitbackendinteractivea...↗2015
▶

💬Community

2
Bugzilla
CVE-2015-3218 polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent↗2015-06-05
▶
Bugzilla
CVE-2015-3218 polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent [fedora-all]↗2015-06-05
▶
CVE-2015-3218 — Polkit Project Polkit vulnerability | cvebase