Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3255HistoryOct 26, 2015 - 7:59 p.m.
CVE-2015-3255
2015-10-2619:59:02
Debian Security Bug Tracker
security-tracker.debian.org
10
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | policykit-1 | < 0.105-12 | policykit-1_0.105-12_all.deb |
| Debian | 11 | all | policykit-1 | < 0.105-12 | policykit-1_0.105-12_all.deb |
| Debian | 999 | all | policykit-1 | < 0.105-12 | policykit-1_0.105-12_all.deb |
| Debian | 13 | all | policykit-1 | < 0.105-12 | policykit-1_0.105-12_all.deb |
Related
ubuntucve
ubuntucve
CVE-2015-3255
2015-10-26 00:00:00
prion
prion
Design/Logic Flaw
2015-10-26 19:59:00
gentoo
gentoo
polkit: Heap-corruption on duplicate IDs
2016-11-15 00:00:00
nessus
nessus
GLSA-201611-07 : polkit: Heap-corruption on duplicate IDs
2016-11-15 00:00:00
EulerOS 2.0 SP3 : polkit (EulerOS-SA-2020-1424)
2020-04-15 00:00:00
EulerOS 2.0 SP2 : polkit (EulerOS-SA-2019-2404)
2019-12-10 00:00:00
nvd
nvd
CVE-2015-3255
2015-10-26 19:59:02
cvelist
cvelist
CVE-2015-3255
2015-10-26 19:00:00
cve
cve
CVE-2015-3255
2015-10-26 19:59:02
ubuntu
ubuntu
PolicyKit vulnerabilities
2018-07-17 00:00:00
PolicyKit vulnerabilities
2018-07-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3717-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2020-1424)
2020-04-16 00:00:00
Ubuntu: Security Advisory (USN-3717-1)
2018-07-17 00:00:00
mageia
mageia
Updated polkit package fixes security vulnerabilities
2015-07-05 20:22:03
fedora
fedora
[SECURITY] Fedora 21 Update: polkit-0.113-4.fc21
2015-07-21 08:23:46
[SECURITY] Fedora 22 Update: polkit-0.113-1.fc22
2015-07-13 19:09:03
suse
suse
Security update for polkit (important)
2015-10-14 10:10:10
freebsd
freebsd
polkit -- multiple vulnerabilities
2015-06-03 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2015-3255