CVE-2015-3218

Mô tả

Tham khảo

• lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html
• lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
• lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
• lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html
• lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html
• lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
• lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
• securityfocus.com/bid/76086
• securitytracker.com/id/1035023
• usn.ubuntu.com/3717-1

Lỗ hổng khác của polkit

• CVE-2021-4115TRUNG BÌNH 5.5There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The high…
• CVE-2021-3560CAO 7.8ĐANG BỊ KHAI THÁC (CISA KEV)It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor…
• CVE-2021-4034CAO 7.8ĐANG BỊ KHAI THÁC (CISA KEV)A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow u…
• CVE-2019-6133TRUNG BÌNH 6.7In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authoriza…
• CVE-2018-19788CAO 8.8A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl co…