Permissions, Privileges, and Access Controls in polkit - CVE-2015-3255
Published: October 26, 2015 / Updated: July 28, 2020
Vulnerability identifier: #VU32408
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-3255
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local non-authenticated attacker to read and manipulate data.
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions.
Affected software
polkit
Gentoo Linux
polkit (Alpine package)
Gentoo Linux
polkit (Alpine package)
How to mitigate CVE-2015-3255
Install update from vendor's website.
polkit - update to 0.113
polkit (Alpine package) - addressed in versions 0.105-r3, 0.105-r4
polkit (Alpine package) - addressed in versions 0.105-r3, 0.105-r4
External References
- http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
- http://www.securitytracker.com/id/1035023
- https://bugs.freedesktop.org/show_bug.cgi?id=83590
- https://bugzilla.redhat.com/show_bug.cgi?id=1245673
- https://security.gentoo.org/glsa/201611-07
- https://usn.ubuntu.com/3717-2/