CVE

Id
81902  
CVE No.
CVE-2015-4625  
Status
Candidate  
Description
Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.  
Phase
Assigned (20150616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
735184 81902 CVE-2015-4625 MLIST:[oss-security] 20150608 CVE request for polkit  View
735185 81902 CVE-2015-4625 URL:http://www.openwall.com/lists/oss-security/2015/06/08/3  View
735186 81902 CVE-2015-4625 MLIST:[oss-security] 20150609 Re: CVE request for polkit  View
735187 81902 CVE-2015-4625 URL:http://www.openwall.com/lists/oss-security/2015/06/09/1  View
735188 81902 CVE-2015-4625 MLIST:[oss-security] 20150616 Re: CVE request for polkit  View
735189 81902 CVE-2015-4625 URL:http://www.openwall.com/lists/oss-security/2015/06/16/21  View
735190 81902 CVE-2015-4625 MLIST:[polkit-devel] 20150529 Agent Authentication Question  View
735191 81902 CVE-2015-4625 URL:http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html  View
735192 81902 CVE-2015-4625 MLIST:[polkit-devel] 20150603 Agent Authentication Question  View
735193 81902 CVE-2015-4625 URL:http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html  View
735194 81902 CVE-2015-4625 MLIST:[polkit-devel] 20150702 polkit-0.113 released  View
735195 81902 CVE-2015-4625 URL:http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html  View
735196 81902 CVE-2015-4625 FEDORA:FEDORA-2015-11058  View
735197 81902 CVE-2015-4625 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html  View
735198 81902 CVE-2015-4625 FEDORA:FEDORA-2015-11743  View
735199 81902 CVE-2015-4625 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html  View
735200 81902 CVE-2015-4625 SUSE:openSUSE-SU-2015:1734  View
735201 81902 CVE-2015-4625 URL:http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html  View
735202 81902 CVE-2015-4625 SUSE:openSUSE-SU-2015:1927  View
735203 81902 CVE-2015-4625 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html  View
735204 81902 CVE-2015-4625 BID:75267  View
735205 81902 CVE-2015-4625 URL:http://www.securityfocus.com/bid/75267  View
735206 81902 CVE-2015-4625 SECTRACK:1035023  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7902 JVNDB-2015-003222 FiverrScript におけるクロスサイトリクエストフォージェリの脆弱性 FiverrScript (別名 Fiverr Script) には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2015-4677 81902 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003222.html  View