Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3256
HistoryOct 26, 2015 - 7:59 p.m.

CVE-2015-3256

2015-10-2619:59:04
CWE-264
[email protected]
web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to “javascript rule evaluation.”

Affected configurations

NVD
Node
polkit_projectpolkitRange≤0.112
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2

Related

redhat 1
nessus 10
openvas 8
debiancve 1
prion 1
cvelist 1
ibm 1
oraclelinux 1
centos 1
ubuntucve 1
cve 1
mageia 1
suse 1
fedora 2
freebsd 1
redhat
redhat
(RHSA-2016:0189) Moderate: polkit security update
2016-02-16 10:08:51
nessus
nessus
CentOS 7 : polkit (CESA-2016:0189)
2016-02-17 00:00:00
Oracle Linux 7 : polkit (ELSA-2016-0189)
2016-02-17 00:00:00
RHEL 7 : polkit (RHSA-2016:0189)
2016-02-17 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2016-0189)
2016-02-18 00:00:00
CentOS Update for polkit CESA-2016:0189 centos7
2016-02-17 00:00:00
RedHat Update for polkit RHSA-2016:0189-01
2016-02-17 00:00:00
debiancve
debiancve
CVE-2015-3256
2015-10-26 19:59:04
prion
prion
Memory corruption
2015-10-26 19:59:00
cvelist
cvelist
CVE-2015-3256
2015-10-26 19:00:00
ibm
ibm
Security Bulletin: A vulnerability in PolicyKit (polkit) affects PowerKVM (CVE-2015-3256)
2018-06-18 01:30:44
oraclelinux
oraclelinux
polkit security update
2016-02-16 00:00:00
centos
centos
polkit security update
2016-02-17 01:41:36
ubuntucve
ubuntucve
CVE-2015-3256
2015-10-26 00:00:00
cve
cve
CVE-2015-3256
2015-10-26 19:59:04
mageia
mageia
Updated polkit package fixes security vulnerabilities
2015-07-05 20:22:03
suse
suse
Security update for polkit (important)
2015-10-14 10:10:10
fedora
fedora
[SECURITY] Fedora 22 Update: polkit-0.113-1.fc22
2015-07-13 19:09:03
[SECURITY] Fedora 21 Update: polkit-0.113-4.fc21
2015-07-21 08:23:46
freebsd
freebsd
polkit -- multiple vulnerabilities
2015-06-03 00:00:00

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2015-3256
redhat1nessus10openvas8debiancve1prion1cvelist1ibm1oraclelinux1centos1ubuntucve1cve1mageia1suse1fedora2freebsd1