CVE-2015-3218
Published: 26 October 2015
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
Priority
Low
Status
| Package | Release | Status |
|---|---|---|
|
policykit-1 Launchpad, Ubuntu, Debian |
Upstream |
Released
(0.105-11)
|
| Ubuntu 20.10 (Groovy Gorilla) |
Not vulnerable
(0.105-11)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(0.105-11)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(0.105-11)
|
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Not vulnerable
(0.105-11)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(0.105-4ubuntu3.14.04.2)
|
|
|
Patches: Upstream: http://cgit.freedesktop.org/polkit/commit/?id=48e646918efb2bf0b3b505747655726d7869f31c |
||