MGASA-2015-0262

    Dashboard / Vulnerabilities / MGASA-2015-0262

    MGASA-2015-0262

    Published: 5 Jul 2015Last Modified: 16 Apr 2026

    Summary: Updated polkit package fixes security vulnerabilities

    Details: Local privilege escalation in polkit before 0.113 due to predictable authentication session cookie values (CVE-2015-4625). Various memory corruption vulnerabilities in polkit before 0.113 in the use of the JavaScript interpreter, possibly leading to local privilege escalation (CVE-2015-3256). Memory corruption vulnerability in polkit before 0.113 in handling duplicate action IDs, possibly leading to local privilege escalation (CVE-2015-3255). Denial of service issue in polkit before 0.113 which allowed any local user to crash polkitd (CVE-2015-3218).

    References: https://advisories.mageia.org/MGASA-2015-0262.html, https://bugs.mageia.org/show_bug.cgi?id=16135, http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html

    Affected packages

    Package

    Name: polkit

    Purl: pkg:rpm/mageia/polkit?arch=source&distro=mageia-4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.113-1.mga4

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    MGASA-2015-0262 | CVE-DB