Lucene search
Ubuntu.comUB:CVE-2015-3255HistoryOct 26, 2015 - 12:00 a.m.
CVE-2015-3255
2015-10-2600:00:00
ubuntu.com
ubuntu.com
14
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
The polkit_backend_action_pool_init function in
polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before
0.113 might allow local users to gain privileges via duplicate action IDs
in action descriptions.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 17.10 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
| ubuntu | 18.04 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | policykit-1 | < 0.105-4ubuntu3.14.04.2 | UNKNOWN |
| ubuntu | 15.10 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
| ubuntu | 16.04 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
| ubuntu | 16.10 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
| ubuntu | 17.04 | noarch | policykit-1 | < 0.105-11ubuntu1 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2015-10-26 19:59:00
gentoo
gentoo
polkit: Heap-corruption on duplicate IDs
2016-11-15 00:00:00
debiancve
debiancve
CVE-2015-3255
2015-10-26 19:59:02
nessus
nessus
GLSA-201611-07 : polkit: Heap-corruption on duplicate IDs
2016-11-15 00:00:00
EulerOS 2.0 SP3 : polkit (EulerOS-SA-2020-1424)
2020-04-15 00:00:00
EulerOS 2.0 SP2 : polkit (EulerOS-SA-2019-2404)
2019-12-10 00:00:00
nvd
nvd
CVE-2015-3255
2015-10-26 19:59:02
cvelist
cvelist
CVE-2015-3255
2015-10-26 19:00:00
cve
cve
CVE-2015-3255
2015-10-26 19:59:02
ubuntu
ubuntu
PolicyKit vulnerabilities
2018-07-17 00:00:00
PolicyKit vulnerabilities
2018-07-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3717-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2020-1424)
2020-04-16 00:00:00
Ubuntu: Security Advisory (USN-3717-1)
2018-07-17 00:00:00
suse
suse
Security update for polkit (important)
2015-10-14 10:10:10
fedora
fedora
[SECURITY] Fedora 22 Update: polkit-0.113-1.fc22
2015-07-13 19:09:03
[SECURITY] Fedora 21 Update: polkit-0.113-4.fc21
2015-07-21 08:23:46
freebsd
freebsd
polkit -- multiple vulnerabilities
2015-06-03 00:00:00
mageia
mageia
Updated polkit package fixes security vulnerabilities
2015-07-05 20:22:03
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2015-3255