NVD

Id
25111  
Name
CVE-2015-3218  
Description
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-12-07  
Seq
2015-3218  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132759 25111 CVE-2015-3218 FEDORA-2015-11058  View
132760 25111 CVE-2015-3218 FEDORA-2015-11743  View
132761 25111 CVE-2015-3218 [polkit-devel] 20150702 polkit-0.113 released  View
132762 25111 CVE-2015-3218 [polkit-devel] 20150529 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent  View
132763 25111 CVE-2015-3218 [polkit-devel] 20150630 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent  View
132764 25111 CVE-2015-3218 openSUSE-SU-2015:1734  View
132765 25111 CVE-2015-3218 openSUSE-SU-2015:1927  View
132766 25111 CVE-2015-3218 76086  View
132767 25111 CVE-2015-3218 1035023  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10303 JVNDB-2015-005623 Polkit の polkitbackend/polkitbackendinteractiveauthority.c におけるサービス運用妨害 (DoS) の脆弱性 Polkit (旧 PolicyKit) の polkitbackend/polkitbackendinteractiveauthority.c の authentication_agent_new 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよび polkitd デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-3218 80443 CVE-2015-3218 25111 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005623.html 2015-07-02 2015-10-29 View