38 matches found
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : polkit vulnerabilities (USN-8173-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8173-1 advisory. It was discovered that polkit incorrectly handled nested elements in XML policy files. If an administrator were tricked into installi...
USN-8173-1: polkit vulnerabilities
It was discovered that polkit incorrectly handled nested elements in XML policy files. If an administrator were tricked into installing a malicious policy file, a remote attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service. CVE-2025-7519 Pavel Kohout...
Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2026-1546)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1546 advisory. A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded...
Medium: polkit
Issue Overview: A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service...
SUSE-SU-2026:21032-1 Security update for polkit
This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859...
libpolkit-agent-1-0-127-3.1 on GA media (moderate)
libpolkit-agent-1-0-127-3.1 on GA media Announcement ID: openSUSE-SU-2026:10453-1 Rating: moderate Cross-References: CVE-2025-7519 CVE-2026-4897 CVSS scores: CVE-2025-7519 SUSE : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2025-7519 SUSE : 7.1...
EUVD-2026-16214
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
CVE-2026-4897
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
DEBIAN-CVE-2026-4897
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
CVE-2026-4897
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
CVE-2026-4897 Polkit: polkit: denial of service via unbounded input processing through standard input
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
CVE-2026-4897 Polkit: polkit: denial of service via unbounded input processing through standard input
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
CVE-2026-4897
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
Linux Distros Unpatched Vulnerability : CVE-2026-4897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary vi...
polkit 安全漏洞
Polkit is a component in Unix-like operating systems that controls system-wide permissions. It enables communication between processes with different priority levels by defining and auditing permission rules. Polkit has a security vulnerability, which stems from insufficient input validation for...
MDVA-2010:019 : polkit-gnome
Programs like hplip that use polkit to authorize privileged operations fail in desktop environments that don't start their own polkit-agent. This update starts the polkit-agent for GNOME in all desktop environments. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associate...
Mandriva Update for polkit-gnome MDVA-2010:019 (polkit-gnome)
Check for the Version of polkit-gnome OpenVAS Vulnerability Test Mandriva Update for polkit-gnome MDVA-2010:019 polkit-gnome Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for polkit-gnome MDVA-2010:019 (polkit-gnome)
Check for the Version of polkit-gnome OpenVAS Vulnerability Test Mandriva Update for polkit-gnome MDVA-2010:019 polkit-gnome Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...