1772 matches found
Design/Logic Flaw
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
CVE-2015-3218
CVE-2015-3218 is a local vulnerability in PolicyKit (polkit) impacting polkit’s authentication flow. The issue resides in the authentication_agent_new function path polkitbackend/polkitbackendinteractiveauthority.c and also relates to RegisterAuthenticationAgent with an invalid object path, enabl...
CVE-2015-3256
CVE-2015-3256 affects PolicyKit (polkit) until version 0.113, with a denial-of-service/privacy risk due to memory corruption and polkitd crashes, tied to javascript rule evaluation. The vulnerability is locally exploitable by unprivileged users and may enable privilege escalation. Public document...
CVE-2015-3255
CVE-2015-3255 affects PolicyKit (polkit) before 0.113. The vulnerability in polkitbackend/polkitbackendactionpool.c (polkit_backend_action_pool_init) may allow local users to gain privileges via duplicate action IDs in action descriptions. Impact is local privilege escalation with partial confide...
CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
SUSE-SU-2015:1838-1 Security update for polkit
polkit was updated to the 0.113 release, fixing security issues and bugs. Security issues fixed: Fixes CVE-2015-4625, a local privilege escalation due to predictable authentication session cookie values. Thanks to Tavis Ormandy, Google Project Zero for reporting this issue. For the future,...
openSUSE: Security Advisory for polkit (openSUSE-SU-2015:1734-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : polkit (openSUSE-2015-655)
Polkit was updated to 0.113 to fix four security issues. The following vulnerabilities were fixed : - CVE-2015-4625: a local privilege escalation due to predictable authentication session cookie values. boo935119 - CVE-2015-3256: various memory corruption vulnerabilities in use of the JavaScript...
Mageia: Security Advisory (MGASA-2015-0262)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for polkit (important)
Polkit was updated to 0.113 to fix four security issues. The following vulnerabilities were fixed: CVE-2015-4625: a local privilege escalation due to predictable authentication session cookie values. boo935119 CVE-2015-3256: various memory corruption vulnerabilities in use of the JavaScript...
Oracle: Security Advisory (ELSA-2014-1359)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-1270)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-0455)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201406-27
Gentoo Linux Local Security Checks GLSA 201406-27 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
polkit denial of service vulnerability
polkit is a license manager developed by software developer David Zeuthen. A denial of service vulnerability exists in polkit. An attacker can exploit this vulnerability to crash the application and cause a denial of service...
Fedora 21 : polkit-0.113-4.fc21 (2015-11743)
Security fix for CVE-2015-3218, CVE-2015-3255, CVE-2015-3256, CVE-2015-4625. Please make sure to reboot or run systemctl restart polkit.service after applying this update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora Update for polkit FEDORA-2015-11743
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
