Описание
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 0.105-11 |
| bionic | not-affected | 0.105-11 |
| cosmic | not-affected | 0.105-11 |
| devel | not-affected | 0.105-11 |
| disco | not-affected | 0.105-11 |
| eoan | not-affected | 0.105-11 |
| esm-infra-legacy/trusty | released | 0.105-4ubuntu3.14.04.2 |
| esm-infra-legacy/xenial | not-affected | 0.105-11 |
| esm-infra/bionic | not-affected | 0.105-11 |
| esm-infra/focal | not-affected | 0.105-11 |
Показывать по
EPSS
2.1 Low
CVSS2
Связанные уязвимости
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
The authentication_agent_new function in polkitbackend/polkitbackendin ...
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
ALT-PU-2015-1502: package `polkit` update to version 0.112-alt4
EPSS
2.1 Low
CVSS2