Vulnerability-Lookup

CVE-2015-3218 (GCVE-0-2015-3218)

Vulnerability from cvelistv5 – Published: 2015-10-26 19:00 – Updated: 2024-08-06 05:39

Summary

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

10 references

URL	Tags
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3717-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2015-1…	vendor-advisoryx_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/76086	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securitytracker.com/id/1035023	vdb-entryx_refsource_SECTRACK
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST

Date Public

2015-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:39:31.986Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[polkit-devel] 20150529 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
          },
          {
            "name": "USN-3717-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3717-1/"
          },
          {
            "name": "FEDORA-2015-11058",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "name": "openSUSE-SU-2015:1927",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "name": "FEDORA-2015-11743",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "name": "[polkit-devel] 20150702 polkit-0.113 released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "name": "76086",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76086"
          },
          {
            "name": "openSUSE-SU-2015:1734",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "name": "1035023",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035023"
          },
          {
            "name": "[polkit-devel] 20150630 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-17T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[polkit-devel] 20150529 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
        },
        {
          "name": "USN-3717-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3717-1/"
        },
        {
          "name": "FEDORA-2015-11058",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "name": "openSUSE-SU-2015:1927",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "name": "FEDORA-2015-11743",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "name": "[polkit-devel] 20150702 polkit-0.113 released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "name": "76086",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76086"
        },
        {
          "name": "openSUSE-SU-2015:1734",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "name": "1035023",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035023"
        },
        {
          "name": "[polkit-devel] 20150630 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-3218",
    "datePublished": "2015-10-26T19:00:00.000Z",
    "dateReserved": "2015-04-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:39:31.986Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-3218",
      "date": "2026-09-18",
      "epss": "0.00415",
      "percentile": "0.35418"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
                  "versionEndIncluding": "0.112",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
        },
        {
          "lang": "es",
          "value": "La funci\u00f3n authentication_agent_new en polkitbackend/polkitbackendinteractiveauthority.c en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda de demonio polkitd) llamando a RegisterAuthenticationAgent con una ruta de objeto no v\u00e1lida."
        }
      ],
      "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/476.html\"\u003eCWE-476: NULL Pointer Dereference\u003c/a\u003e",
      "id": "CVE-2015-3218",
      "lastModified": "2024-11-21T02:28:55.843",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "LOW",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 2.1,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2015-10-26T19:59:00.107",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/76086"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securitytracker.com/id/1035023"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://usn.ubuntu.com/3717-1/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/76086"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securitytracker.com/id/1035023"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://usn.ubuntu.com/3717-1/"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
                    "versionEndIncluding": "0.112",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
          },
          {
            "lang": "es",
            "value": "La funci\u00f3n authentication_agent_new en polkitbackend/polkitbackendinteractiveauthority.c en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda de demonio polkitd) llamando a RegisterAuthenticationAgent con una ruta de objeto no v\u00e1lida."
          }
        ],
        "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/476.html\"\u003eCWE-476: NULL Pointer Dereference\u003c/a\u003e",
        "id": "CVE-2015-3218",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 2.1,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2015-10-26T19:59:00.107",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/76086"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securitytracker.com/id/1035023"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://usn.ubuntu.com/3717-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/76086"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id/1035023"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/3717-1/"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T12:13:56+00:00",
      "cve": "CVE-2015-3218",
      "id": "CVE-2015-3218",
      "initial_release_date": "2015-05-29T00:00:00+00:00",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "5",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3218.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-08-27T01:52:19Z",
      "cve": "CVE-2015-3218",
      "id": "CVE-2015-3218",
      "initial_release_date": "2023-02-15T05:19:22Z",
      "product_status:known_affected": "394",
      "product_status:recommended": "414",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2015-3218",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2015-3218.json",
      "version": "37"
    }
  }
}

CNVD-2015-05257

Vulnerability from cnvd - Published: 2015-08-14

Title

polkit拒绝服务漏洞

Description

polkit是软件开发者David Zeuthen所研发的一款授权管理器。 polkit中存在拒绝服务漏洞。攻击者可利用该漏洞使应用程序崩溃，造成拒绝服务。

Severity

低

Patch Name

polkit拒绝服务漏洞的补丁

Patch Description

polkit是软件开发者David Zeuthen所研发的一款授权管理器。polkit中存在拒绝服务漏洞。攻击者可利用该漏洞使应用程序崩溃，造成拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://bugs.freedesktop.org/show_bug.cgi?id=90829

Reference

http://www.securityfocus.com/bid/76086

Impacted products

Name
polkit polkit

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "76086"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-3218"
    }
  },
  "description": "polkit\u662f\u8f6f\u4ef6\u5f00\u53d1\u8005David Zeuthen\u6240\u7814\u53d1\u7684\u4e00\u6b3e\u6388\u6743\u7ba1\u7406\u5668\u3002\r\n\r\npolkit\u4e2d\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Tavis Ormandy",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://bugs.freedesktop.org/show_bug.cgi?id=90829",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-05257",
  "openTime": "2015-08-14",
  "patchDescription": "polkit\u662f\u8f6f\u4ef6\u5f00\u53d1\u8005David Zeuthen\u6240\u7814\u53d1\u7684\u4e00\u6b3e\u6388\u6743\u7ba1\u7406\u5668\u3002polkit\u4e2d\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u5e94\u7528\u7a0b\u5e8f\u5d29\u6e83\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "polkit\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "polkit polkit"
  },
  "referenceLink": "http://www.securityfocus.com/bid/76086",
  "serverity": "\u4f4e",
  "submitTime": "2015-08-13",
  "title": "polkit\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

FKIE_CVE-2015-3218

Vulnerability from fkie_nvd - Published: 2015-10-26 19:59 - Updated: 2026-06-17 00:25

Severity

Summary

References

	URL	Tags
	secalert@redhat.com	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html
	secalert@redhat.com	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
	secalert@redhat.com	http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
	secalert@redhat.com	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html
	secalert@redhat.com	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html
	secalert@redhat.com	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
	secalert@redhat.com	http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
	secalert@redhat.com	http://www.securityfocus.com/bid/76086
	secalert@redhat.com	http://www.securitytracker.com/id/1035023
	secalert@redhat.com	https://usn.ubuntu.com/3717-1/
	af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/76086
	af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1035023
	af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/3717-1/

Impacted products

	Vendor	Product	Version
	polkit_project	polkit	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
              "versionEndIncluding": "0.112",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n authentication_agent_new en polkitbackend/polkitbackendinteractiveauthority.c en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales provocar una denegaci\u00f3n de servicio (referencia a puntero NULL y ca\u00edda de demonio polkitd) llamando a RegisterAuthenticationAgent con una ruta de objeto no v\u00e1lida."
    }
  ],
  "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/476.html\"\u003eCWE-476: NULL Pointer Dereference\u003c/a\u003e",
  "id": "CVE-2015-3218",
  "lastModified": "2026-06-17T00:25:33.640",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 2.1,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-10-26T19:59:00.107",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/76086"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id/1035023"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://usn.ubuntu.com/3717-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/76086"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1035023"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/3717-1/"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-Q9CC-G5Q2-4HHX

Vulnerability from github – Published: 2022-05-14 03:13 – Updated: 2025-04-12 12:53

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-3218"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-10-26T19:59:00Z",
    "severity": "LOW"
  },
  "details": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.",
  "id": "GHSA-q9cc-g5q2-4hhx",
  "modified": "2025-04-12T12:53:30Z",
  "published": "2022-05-14T03:13:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3218"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3717-1"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/76086"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1035023"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2015-3218

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2015-3218

Aliases

CVE-2015-3218

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-3218",
    "description": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.",
    "id": "GSD-2015-3218",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-3218.html",
      "https://ubuntu.com/security/CVE-2015-3218",
      "https://advisories.mageia.org/CVE-2015-3218.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-3218"
      ],
      "details": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.",
      "id": "GSD-2015-3218",
      "modified": "2023-12-13T01:20:07.135863Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2015-3218",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html",
            "refsource": "MISC",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "name": "http://www.securitytracker.com/id/1035023",
            "refsource": "MISC",
            "url": "http://www.securitytracker.com/id/1035023"
          },
          {
            "name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html",
            "refsource": "MISC",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html",
            "refsource": "MISC",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "name": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html",
            "refsource": "MISC",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
          },
          {
            "name": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html",
            "refsource": "MISC",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/76086",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/76086"
          },
          {
            "name": "https://usn.ubuntu.com/3717-1/",
            "refsource": "MISC",
            "url": "https://usn.ubuntu.com/3717-1/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "0.112",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-3218"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:1734",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
            },
            {
              "name": "[polkit-devel] 20150529 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
            },
            {
              "name": "[polkit-devel] 20150630 Crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html"
            },
            {
              "name": "[polkit-devel] 20150702 polkit-0.113 released",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
            },
            {
              "name": "FEDORA-2015-11743",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
            },
            {
              "name": "FEDORA-2015-11058",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
            },
            {
              "name": "76086",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/76086"
            },
            {
              "name": "1035023",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1035023"
            },
            {
              "name": "openSUSE-SU-2015:1927",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
            },
            {
              "name": "USN-3717-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/3717-1/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-07-18T01:29Z",
      "publishedDate": "2015-10-26T19:59Z"
    }
  }
}

OPENSUSE-SU-2024:10436-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

libpolkit0-0.113-3.4 on GA media

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2015-3218.

CVE-2015-3218

Recommended: 24 products

Open the full advisory

SUSE-SU-2015:1838-1

Vulnerability from csaf_suse - Published: 2015-10-22 07:44 - Updated: 2015-10-22 07:44

Summary

Security update for polkit

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2015-3218.

CVE-2015-3218

Recommended: 26 products

Open the full advisory

UBUNTU-CVE-2015-3218 (CVE-2015-3218)

Vulnerability from osv_ubuntu – Published: 2015-10-26 00:00 – Updated: 2026-04-22 07:37 – Source website

Details

Severity

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2015-3218	REPORT
	http://lists.freedesktop.org/archives/polkit-deve…	REPORT
	https://ubuntu.com/security/notices/USN-3717-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2015-3218	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gir1.2-polkit-1.0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-agent-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-backend-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-gobject-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "policykit-1",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "policykit-1",
        "purl": "pkg:deb/ubuntu/policykit-1@0.105-4ubuntu3.14.04.2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.105-4ubuntu3.14.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.105-3ubuntu3",
        "0.105-4ubuntu1",
        "0.105-4ubuntu2",
        "0.105-4ubuntu2.14.04.1",
        "0.105-4ubuntu3.14.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.",
  "id": "UBUNTU-CVE-2015-3218",
  "modified": "2026-04-22T07:37:47Z",
  "published": "2015-10-26T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-3218"
    },
    {
      "type": "REPORT",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3717-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3218"
    }
  ],
  "related": [
    "USN-3717-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2015-3218"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2015-3218 (GCVE-0-2015-3218)

CNVD-2015-05257

FKIE_CVE-2015-3218

GHSA-Q9CC-G5Q2-4HHX

GSD-2015-3218

OPENSUSE-SU-2024:10436-1

SUSE-SU-2015:1838-1

UBUNTU-CVE-2015-3218 (CVE-2015-3218)

Tags

Sightings

Nomenclature

Related by attack behaviour