NVD

Id
25140  
Name
CVE-2015-3255  
Description
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-12-07  
Seq
2015-3255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132965 25140 CVE-2015-3255 [polkit-devel] 20150702 polkit-0.113 released  View
132966 25140 CVE-2015-3255 openSUSE-SU-2015:1734  View
132967 25140 CVE-2015-3255 openSUSE-SU-2015:1927  View
132968 25140 CVE-2015-3255 1035023  View
132969 25140 CVE-2015-3255 https://bugs.freedesktop.org/show_bug.cgi?id=83590  View
132970 25140 CVE-2015-3255 https://bugzilla.redhat.com/show_bug.cgi?id=1245673  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10304 JVNDB-2015-005624 Polkit の polkitbackend/polkitbackendactionpool.c の polkit_backend_action_pool_init 関数における権限を取得される脆弱性 Polkit (旧 PolicyKit) の polkitbackend/polkitbackendactionpool.c の polkit_backend_action_pool_init 関数には、権限を取得される脆弱性が存在します。 CVE-2015-3255 80480 CVE-2015-3255 25140 4.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005624.html 2015-07-02 2015-10-29 View