Security Advisory

CVE-2015-3218

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-10-26 19:00:00
Last updated 2024-08-06 05:39:31
Assigner redhat
State PUBLISHED

Description

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.