Denial Of Service (DoS)

policykit-1 is vulnerable to denial of service. A NULL pointer dereference in the authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c allows local users to cause crash the application with an invalid object path...

CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

UBUNTU-CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

The vulnerability of the Linux systemd initialization process, related to the access to memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux systemd initialization process is related to an error in the handling of the queue after it is freed from memory. Asynchronous Polkit requests are executed when processing dbus messages. Exploiting this vulnerability allows an attacker to gain access to confidential...

Privilege Escalation

networkmanager is vulnerable to privilege escalation. An input sanitization flaw was found in the way the ifcfg-rh NetworkManager plug-in escaped network connection names containing special characters. If PolicyKit was configured to allow local, unprivileged users to create and save new network...

Privilege Escalation

networkmanager is vulnerable to privilege escalation. The vulnerability exists as it was found that NetworkManager did not properly enforce PolicyKit settings controlling the permissions to configure wireless network sharing. A local, unprivileged user could use this flaw to bypass intended...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-1752)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-1656)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2314)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command. Mitigation Do not allow negative UIDs or UIDs greater than 2147483647...

EulerOS Virtualization for ARM 64 3.0.3.0 : polkit (EulerOS-SA-2019-2314)

According to the version of the polkit packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute...

CVE-2012-5617

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...

CVE-2012-5617

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...

Privilege escalation

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...

CVE-2012-5617

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...

CVE-2012-5617

Technical details about CVE-2012-5617, including affected products, root cause, and remediation, are not provided in the supplied documents. Monitor updates from vendors and security advisories for confirmed impact and fixes.

polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

Amazon Linux 2 : polkit (ALAS-2019-1331)

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command.CVE-2018-19788 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisor...

The vulnerability of the spice-gtk utility in the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the spice-gtk utility in the Astra Linux operating system is related to errors in the operation of USB devices when ilev-enabled is set in policykit. Exploiting this vulnerability can allow a perpetrator to cause service failures...

USN-3934-2: PolicyKit vulnerability

USN-3934-1 fixed a vulnerability in Policykit. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that PolicyKit incorrectly relied on the fork system call in the Linux kernel being atomic. A local attacker could possibly use this issu...