CVE-2015-3255 The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in ac...
MediumCVSS 4.6
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/policykit-1(Debian:12) | < 0.105-12 | 0.105-12 |
| debian/policykit-1(Debian:13) | < 0.105-12 | 0.105-12 |
| debian/policykit-1(Debian:14) | < 0.105-12 | 0.105-12 |
| polkit project polkit | <= 0.112 | No fix listed |
References
- Debian Security Tracker CVE-2015-3255 vendor-advisory
- [polkit-devel] 20150702 polkit-0.113 released mailing-list
- openSUSE-SU-2015:1734 vendor-advisory
- openSUSE-SU-2015:1927 vendor-advisory
- 1035023 vdb-entry
- bugs.freedesktop.org
- bugzilla.redhat.com
- GLSA-201611-07 vendor-advisory
- USN-3717-2 vendor-advisory
- bugs.debian.org issue-tracking