PT-2015-6125 · Polkit+3 · Policykit+3

Vasyl Kaigorodov · Publicado 2015-07-02 · Atualizado 2018-07-28 · CVE-2015-3255

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PolicyKit (aka polkit) versions prior to 0.113

Description The issue is related to the polkit backend action pool init function in polkitbackend/polkitbackendactionpool.c, which might allow local users to gain privileges via duplicate action IDs in action descriptions.

Recommendations For versions prior to 0.113, update to version 0.113 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2015-1588

CVE-2015-3255

MGASA-2015-0262

OPENSUSE-SU-2015_1734-1

OPENSUSE-SU-2024:10436-1

SUSE-SU-2015:1838-1

USN-3717-1

USN-3717-2

Produtos afetados

Alt Linux

Policykit

Suse

Ubuntu

Referências · 62

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4625 · Nota de Segurança
• http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html · Nota
• https://bdu.fstec.ru/vul/2015-06855 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-3256 · Nota
• https://suse.com/security/cve/CVE-2015-4625 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3218 · Nota de Segurança
• https://advisories.mageia.org/MGASA-2015-0262.html · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3255 · Aviso do Fabricante
• https://security.gentoo.org/glsa/201611-07 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-3255 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-4625 · Aviso do Fabricante
• http://securitytracker.com/id/1035023 · Nota
• https://bdu.fstec.ru/vul/2015-11975 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06856 · Nota de Segurança