CVE-2015-3256 - CVE House
Back to Database
Status published Medium CVE-2015-3256

PolicyKit (aka polkit) before 0.113 allows local users to cause...

Vulnerability Description

PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-3256

Credits & Attribution

No credits recorded in the NVD database.

References

More from polkit project

View All →
CVE-2019-6133
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism...
Medium 6.7
CVE-2018-19788
A flaw was found in PolicyKit (aka polkit) 0.115 that...
High 8.8
CVE-2015-3255
The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before...
Medium 4.6
CVE-2015-3218
The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before...
Low 2.1

Affected Vendor

polkit project

View all reports →

Affected Software

polkit, opensuse
Vulnerable Versions:
0, 13.1, 13.2

Timeline

Official Publish: October 26th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.