CVE-2015-4625

Published: 26 October 2015

Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.

Priority

Status

Package	Release	Status
policykit-1 Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 20.10 (Groovy Gorilla)	Released (0.105-11ubuntu1)
	Ubuntu 20.04 LTS (Focal Fossa)	Released (0.105-11ubuntu1)
	Ubuntu 18.04 LTS (Bionic Beaver)	Released (0.105-11ubuntu1)
	Ubuntu 16.04 LTS (Xenial Xerus)	Released (0.105-11ubuntu1)
	Ubuntu 14.04 ESM (Trusty Tahr)	Released (0.105-4ubuntu3.14.04.2)
	Patches: Upstream: http://cgit.freedesktop.org/polkit/commit/?id=ea544ffc18405237ccd95d28d7f45afef49aca17 Upstream: http://cgit.freedesktop.org/polkit/commit/?id=493aa5dc1d278ab9097110c1262f5229bbaf1766 Upstream: http://cgit.freedesktop.org/polkit/commit/?id=fb5076b7c05d01a532d593a4079a29cf2d63a228

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM