CVE-2015-3218 - CVE House
Back to Database
Status published Low CVE-2015-3218

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before...

Vulnerability Description

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-3218

Credits & Attribution

No credits recorded in the NVD database.

References

More from polkit project

View All →
CVE-2019-6133
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism...
Medium 6.7
CVE-2018-19788
A flaw was found in PolicyKit (aka polkit) 0.115 that...
High 8.8
CVE-2015-3256
PolicyKit (aka polkit) before 0.113 allows local users to cause...
Medium 4.6
CVE-2015-3255
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before...
Medium 4.6

Affected Vendor

polkit project

View all reports →

Affected Software

polkit
Vulnerable Versions:
0

Timeline

Official Publish: October 26th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.