PP
Vendor
Polkit Project
11
CVEs
2
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-4115 | PO Polkit Polkit Project | 5.5 | Feb 21 | There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion |
| CVE-2021-3560 In wildKEV | PO Polkit Polkit Project | 7.8 | Feb 16 | Red Hat Polkit Incorrect Authorization Vulnerability |
| CVE-2021-4034 RansomwareIn wildKEV | PO Polkit Polkit Project | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability |
| CVE-2019-6133 | PO Polkit Polkit Project | 6.7 | Jan 11 | In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached |
| CVE-2018-19788 | PO Polkit Polkit Project | 8.8 | Dec 3 | A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command |
| CVE-2018-1116 | PO Polkit Polkit Project | 4.4 | Jul 10 | A flaw was found in polkit before version 0.116 |
| CVE-2015-4625 | PO Polkit Polkit Project | – | Oct 26 | Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of… |
| CVE-2015-3256 | PO Polkit Polkit Project | – | Oct 26 | PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified… |
| CVE-2015-3255 | PO Polkit Polkit Project | – | Oct 26 | The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow local users to gain privileges via… |
| CVE-2015-3218 | PO Polkit Polkit Project | – | Oct 26 | The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service… |
| CVE-2013-4288 | PO Polkit Polkit Project | – | Oct 3 | Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the… |