CVE search results

11 – 15 of 15 results

Detailed view

Sort by:

CVE-2015-3218

Low priority

Some fixes available 1 of 4

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash)...

1 affected package

policykit-1

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
policykit-1	—	—	Not affected	Not affected	Not affected

CVE-2013-4288

Medium priority

Fixed

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the...

1 affected package

policykit-1

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
policykit-1	—	—	—	—	—

CVE-2011-4945

Medium priority

Ignored

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.

2 affected packages

policykit, policykit-1

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
policykit	—	—	—	—	—
policykit-1	—	—	—	—	—

CVE-2011-1485

Medium priority

Fixed

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the...

1 affected package

policykit-1

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
policykit-1	—	—	—	—	—

CVE-2010-0750

Low priority

Ignored

pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.

1 affected package

policykit-1

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
policykit-1	—	—	—	—	—

Export to JSON

Results by page:

Search CVE reports