NVD

Id
26004  
Name
CVE-2015-4625  
Description
Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-26  
Modified Date
2016-12-07  
Seq
2015-4625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
137464 26004 CVE-2015-4625 FEDORA-2015-11058  View
137465 26004 CVE-2015-4625 FEDORA-2015-11743  View
137466 26004 CVE-2015-4625 [polkit-devel] 20150702 polkit-0.113 released  View
137467 26004 CVE-2015-4625 [polkit-devel] 20150603 Agent Authentication Question  View
137468 26004 CVE-2015-4625 [polkit-devel] 20150529 Agent Authentication Question  View
137469 26004 CVE-2015-4625 openSUSE-SU-2015:1734  View
137470 26004 CVE-2015-4625 openSUSE-SU-2015:1927  View
137471 26004 CVE-2015-4625 [oss-security] 20150608 CVE request for polkit  View
137472 26004 CVE-2015-4625 [oss-security] 20150609 Re: CVE request for polkit  View
137473 26004 CVE-2015-4625 [oss-security] 20150616 Re: CVE request for polkit  View
137474 26004 CVE-2015-4625 75267  View
137475 26004 CVE-2015-4625 1035023  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10306 JVNDB-2015-005626 Polkit の authentication_agent_new_cookie 関数における整数オーバーフローの脆弱性 Polkit (旧 PolicyKit) の authentication_agent_new_cookie 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-4625 81850 CVE-2015-4625 26004 4.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005626.html 2015-07-02 2015-10-29 View