Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004354 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

6.7CVSS6.8AI score0.00026EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003871 advisory. In PolicyKit aka polkit 0.115, the start time protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly...

6.7CVSS6.8AI score0.00026EPSS
Exploits0References28
RedHat Linux
RedHat Linux
added 2019/09/12 10:49 a.m.1 views

polkit: Temporary auth hijacking via PID reuse and non-atomic fork

A vulnerability was found in polkit. When authentication is performed by a non-root user to perform an administrative task, the authentication is temporarily cached in such a way that a local attacker could impersonate the authorized process, thus gaining access to elevated privileges...

6.7CVSS6.8AI score0.00026EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/04/23 12:58 p.m.2 views

polkit: Temporary auth hijacking via PID reuse and non-atomic fork

A vulnerability was found in polkit. When authentication is performed by a non-root user to perform an administrative task, the authentication is temporarily cached in such a way that a local attacker could impersonate the authorized process, thus gaining access to elevated privileges...

6.7CVSS6.8AI score0.00026EPSS
Exploits0References5
OSV
OSV
added 2019/01/11 2:29 p.m.1 views

DEBIAN-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

6.7CVSS8.1AI score0.00026EPSS
Exploits0References1
OSV
OSV
added 2019/01/11 2:29 p.m.1 views

ALPINE-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

6.7CVSS6.9AI score0.00026EPSS
Exploits0References1
OSV
OSV
added 2019/01/11 12:0 a.m.1 views

UBUNTU-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

6.7CVSS6.8AI score0.00026EPSS
Exploits0References14
Rows per page
Query Builder