488 matches found
Red Hat PolicyKit pkexec Command Execution Vulnerability
Red Hat PolicyKit is a tool from Red Hat for privilege control of applications on Unix-compatible systems. A security vulnerability exists in the pkexec command in Red Hat PolicyKit 0.113 and earlier versions. An attacker could exploit the vulnerability to execute arbitrary commands with user...
polkit security update
CentOS Errata and Security Advisory CESA-2016:0189 Updated polkit packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
Moderate: Red Hat Security Advisory: polkit security update
Updated polkit packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...
The vulnerabilities of Fedora and openSUSE operating systems allow attackers to increase their privileges.
The vulnerability of the authenticationagentnewcookie function in the PolicyKit package of Fedora and openSUSE is related to integer overflow. Exploiting this vulnerability allows a malicious actor to increase their privileges by creating a large number of connections, resulting in duplicate cook...
The vulnerability of the OpenSUSE operating system allows a hacker to trigger a service failure or increase their privileges.
The vulnerability of PolicyKit component in the OpenSUSE operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to cause service failures or increase their privileges...
PolicyKit Denial of Service Vulnerability
PolicyKit a.k.a. Polkit is a tool from Red Hat, Inc. for controlling application privileges on Unix-compatible systems. A denial of service vulnerability exists in versions of PolicyKit prior to 0.113. It allows a local user to launch a denial-of-service attack via unspecified vectors to gain...
PolicyKit Elevation of Privilege Vulnerability
PolicyKit a.k.a. Polkit is a tool from Red Hat, Inc. for controlling application privileges on Unix-compatible systems. An elevation of privilege vulnerability exists in versions of PolicyKit prior to 0.113. It allows a local user to gain privileges by repeatedly manipulating Id...
CVE-2015-4625
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
CVE-2015-4625
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
DEBIAN-CVE-2015-4625
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
CVE-2015-3256
PolicyKit aka polkit before 0.113 allows local users to cause a denial of service memory corruption and polkitd daemon crash and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."...
CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
DEBIAN-CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
Memory corruption
PolicyKit aka polkit before 0.113 allows local users to cause a denial of service memory corruption and polkitd daemon crash and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."...
DEBIAN-CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
Integer overflow
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
CVE-2015-3256
PolicyKit aka polkit before 0.113 allows local users to cause a denial of service memory corruption and polkitd daemon crash and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."...
CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
Null pointer dereference
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...
CVE-2015-3218
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...