UBUNTU-CVE-2015-3218
See a problem?- Source
- https://ubuntu.com/security/notices/UBUNTU-CVE-2015-3218
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-3218.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-3218
- Related
- Published
- 2015-10-26T00:00:00Z
- Modified
- 2015-10-26T00:00:00Z
- Summary
- [none]
- Details
-
The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
- References
Affected packages
Ubuntu:14.04:LTS / policykit-1
Package
- Name
- policykit-1
- Purl
- pkg:deb/ubuntu/policykit-1@0.105-4ubuntu3.14.04.2?arch=src?distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.105-4ubuntu3.14.04.2
Affected versions
0.*
0.105-3ubuntu3
0.105-4ubuntu1
0.105-4ubuntu2
0.105-4ubuntu2.14.04.1
0.105-4ubuntu3.14.04.1
Ecosystem specific
{
"availability": "No subscription required",
"ubuntu_priority": "low",
"binaries": [
{
"libpolkit-backend-1-dev": "0.105-4ubuntu3.14.04.2",
"gir1.2-polkit-1.0": "0.105-4ubuntu3.14.04.2",
"libpolkit-gobject-1-dev": "0.105-4ubuntu3.14.04.2",
"libpolkit-agent-1-dev": "0.105-4ubuntu3.14.04.2",
"libpolkit-gobject-1-0": "0.105-4ubuntu3.14.04.2",
"libpolkit-gobject-1-0-dbgsym": "0.105-4ubuntu3.14.04.2",
"libpolkit-agent-1-0-dbgsym": "0.105-4ubuntu3.14.04.2",
"policykit-1-dbgsym": "0.105-4ubuntu3.14.04.2",
"libpolkit-backend-1-0": "0.105-4ubuntu3.14.04.2",
"libpolkit-agent-1-0": "0.105-4ubuntu3.14.04.2",
"policykit-1-doc": "0.105-4ubuntu3.14.04.2",
"libpolkit-backend-1-0-dbgsym": "0.105-4ubuntu3.14.04.2",
"policykit-1": "0.105-4ubuntu3.14.04.2"
}
]
}