Vulnerability-Lookup

CVE-2015-4625 (GCVE-0-2015-4625)

Vulnerability from cvelistv5 – Published: 2015-10-26 19:00 – Updated: 2024-08-06 06:18

Summary

Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/75267	vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2015-1…	vendor-advisoryx_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2015/06/09/1	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2015/06/08/3	mailing-listx_refsource_MLIST
http://lists.freedesktop.org/archives/polkit-deve…	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2015/0…	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1035023	vdb-entryx_refsource_SECTRACK

Date Public

2015-05-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:18:12.015Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[polkit-devel] 20150603 Agent Authentication Question",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
          },
          {
            "name": "75267",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75267"
          },
          {
            "name": "FEDORA-2015-11058",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "name": "openSUSE-SU-2015:1927",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "name": "FEDORA-2015-11743",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "name": "[polkit-devel] 20150702 polkit-0.113 released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "name": "[oss-security] 20150609 Re: CVE request for polkit",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
          },
          {
            "name": "openSUSE-SU-2015:1734",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "name": "[oss-security] 20150608 CVE request for polkit",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
          },
          {
            "name": "[polkit-devel] 20150529 Agent Authentication Question",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
          },
          {
            "name": "[oss-security] 20150616 Re: CVE request for polkit",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
          },
          {
            "name": "1035023",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035023"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T22:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[polkit-devel] 20150603 Agent Authentication Question",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
        },
        {
          "name": "75267",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75267"
        },
        {
          "name": "FEDORA-2015-11058",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "name": "openSUSE-SU-2015:1927",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "name": "FEDORA-2015-11743",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "name": "[polkit-devel] 20150702 polkit-0.113 released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "name": "[oss-security] 20150609 Re: CVE request for polkit",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
        },
        {
          "name": "openSUSE-SU-2015:1734",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "name": "[oss-security] 20150608 CVE request for polkit",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
        },
        {
          "name": "[polkit-devel] 20150529 Agent Authentication Question",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
        },
        {
          "name": "[oss-security] 20150616 Re: CVE request for polkit",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
        },
        {
          "name": "1035023",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035023"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4625",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[polkit-devel] 20150603 Agent Authentication Question",
              "refsource": "MLIST",
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
            },
            {
              "name": "75267",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75267"
            },
            {
              "name": "FEDORA-2015-11058",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
            },
            {
              "name": "openSUSE-SU-2015:1927",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
            },
            {
              "name": "FEDORA-2015-11743",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
            },
            {
              "name": "[polkit-devel] 20150702 polkit-0.113 released",
              "refsource": "MLIST",
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
            },
            {
              "name": "[oss-security] 20150609 Re: CVE request for polkit",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
            },
            {
              "name": "openSUSE-SU-2015:1734",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
            },
            {
              "name": "[oss-security] 20150608 CVE request for polkit",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
            },
            {
              "name": "[polkit-devel] 20150529 Agent Authentication Question",
              "refsource": "MLIST",
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
            },
            {
              "name": "[oss-security] 20150616 Re: CVE request for polkit",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
            },
            {
              "name": "1035023",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035023"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4625",
    "datePublished": "2015-10-26T19:00:00.000Z",
    "dateReserved": "2015-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:18:12.015Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-4625",
      "date": "2026-09-17",
      "epss": "0.00405",
      "percentile": "0.34341"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
                  "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
                  "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
                  "versionEndIncluding": "0.112",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
        },
        {
          "lang": "es",
          "value": "Desbordamiento de entero en la funci\u00f3n authentication_agent_new_cookie en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales obtener privilegios mediante la creaci\u00f3n de un n\u00famero de conexiones grande, lo que desencadena la emisi\u00f3n de un valor de cookie duplicado."
        }
      ],
      "id": "CVE-2015-4625",
      "lastModified": "2024-11-21T02:31:25.497",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 4.6,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2015-10-26T19:59:05.733",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/75267"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securitytracker.com/id/1035023"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/75267"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securitytracker.com/id/1035023"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-189"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
                    "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
                    "versionEndIncluding": "0.112",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de entero en la funci\u00f3n authentication_agent_new_cookie en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales obtener privilegios mediante la creaci\u00f3n de un n\u00famero de conexiones grande, lo que desencadena la emisi\u00f3n de un valor de cookie duplicado."
          }
        ],
        "id": "CVE-2015-4625",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.6,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2015-10-26T19:59:05.733",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/75267"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id/1035023"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/75267"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id/1035023"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-189"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-27T09:06:27+00:00",
      "cve": "CVE-2015-4625",
      "id": "CVE-2015-4625",
      "initial_release_date": "2015-05-29T00:00:00+00:00",
      "product_status:known_affected": "9",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "polkit: potential information disclosure vulnerability due to cookie counter wrapping",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-4625.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-13T00:24:01Z",
      "cve": "CVE-2015-4625",
      "id": "CVE-2015-4625",
      "initial_release_date": "2023-02-15T05:17:38Z",
      "product_status:known_affected": "394",
      "product_status:recommended": "402",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2015-4625",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2015-4625.json",
      "version": "38"
    }
  }
}

BDU:2015-11967 (CVE-2015-4625)

Vulnerability from fstec – Published: 2015-11-20 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость операционных систем Fedora и openSUSE, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость функции authentication_agent_new_cookie пакета PolicyKit операционных систем Fedora и openSUSE связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему локально, повысить свои привилегии путем создания большого количества соединений, вызывающего дублирование значений cookie

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:P/I:P/A:P

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2015-4625, FEDORA-2015-11058, FEDORA-2015-11743, OPENSUSE-SU-2015:1734, BID, ID:75267

References

10 references

URL
http://www.securityfocus.com/bid/75267
http://www.openwall.com/lists/oss-security/2015/06/16/21
http://www.openwall.com/lists/oss-security/2015/06/09/1
http://www.openwall.com/lists/oss-security/2015/06/08/3
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html
http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html
http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html

Impacted products

2 products from 2 vendors

Vendors

Novell Inc., Fedora Project

Products

openSUSE, Fedora

Versions

13.1 (openSUSE), 13.2 (openSUSE), 21 (Fedora), 22 (Fedora)

Product types

Operating system

Mitigations

Обновление пакета до версии 0.113 или более новой

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Novell Inc., Fedora Project",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "13.1 (openSUSE), 13.2 (openSUSE), 21 (Fedora), 22 (Fedora)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.113 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "26.10.2015",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.11.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-11967",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-4625, FEDORA-2015-11058, FEDORA-2015-11743, openSUSE-SU-2015:1734, BID ID:75267",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "openSUSE, Fedora",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Fedora \u0438 openSUSE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 authentication_agent_new_cookie \u043f\u0430\u043a\u0435\u0442\u0430 PolicyKit \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Fedora \u0438 openSUSE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 cookie",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.securityfocus.com/bid/75267\nhttp://www.openwall.com/lists/oss-security/2015/06/16/21\nhttp://www.openwall.com/lists/oss-security/2015/06/09/1\nhttp://www.openwall.com/lists/oss-security/2015/06/08/3\nhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html\nhttp://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html\nhttp://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html\nhttp://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html\nhttp://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html\nhttp://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)"
}

CNVD-2015-03960

Vulnerability from cnvd - Published: 2015-06-25

Title

Red Hat PolicyKit拒绝服务漏洞

Description

Red Hat PolicyKit（又名Polkit）是美国红帽（Red Hat）公司的一个用于在Unix兼容系统中对应用程序进行权限控制的工具。该工具为现代桌面提供了一个中央框架用于授权一般应用程序进行特权工作。 Red Hat PolicyKit中存在拒绝服务漏洞。攻击者可利用该漏洞造成拒绝服务。

Severity

中

Formal description

目前没有详细的解决方案提供： https://wiki.debian.org/PolicyKit

Reference

http://www.securityfocus.com/bid/75267

Impacted products

Name
Red Hat PolicyKit

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75267"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4625"
    }
  },
  "description": "Red Hat PolicyKit\uff08\u53c8\u540dPolkit\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u7528\u4e8e\u5728Unix\u517c\u5bb9\u7cfb\u7edf\u4e2d\u5bf9\u5e94\u7528\u7a0b\u5e8f\u8fdb\u884c\u6743\u9650\u63a7\u5236\u7684\u5de5\u5177\u3002\u8be5\u5de5\u5177\u4e3a\u73b0\u4ee3\u684c\u9762\u63d0\u4f9b\u4e86\u4e00\u4e2a\u4e2d\u592e\u6846\u67b6\u7528\u4e8e\u6388\u6743\u4e00\u822c\u5e94\u7528\u7a0b\u5e8f\u8fdb\u884c\u7279\u6743\u5de5\u4f5c\u3002\r\n\r\nRed Hat PolicyKit\u4e2d\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Tavis",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttps://wiki.debian.org/PolicyKit",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-03960",
  "openTime": "2015-06-25",
  "products": {
    "product": "Red Hat PolicyKit"
  },
  "referenceLink": "http://www.securityfocus.com/bid/75267",
  "serverity": "\u4e2d",
  "submitTime": "2015-06-24",
  "title": "Red Hat PolicyKit\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

FKIE_CVE-2015-4625

Vulnerability from fkie_nvd - Published: 2015-10-26 19:59 - Updated: 2026-06-17 00:27

Severity

Summary

References

	URL	Tags
	cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html
	cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
	cve@mitre.org	http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
	cve@mitre.org	http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html
	cve@mitre.org	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html
	cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
	cve@mitre.org	http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
	cve@mitre.org	http://www.openwall.com/lists/oss-security/2015/06/08/3
	cve@mitre.org	http://www.openwall.com/lists/oss-security/2015/06/09/1
	cve@mitre.org	http://www.openwall.com/lists/oss-security/2015/06/16/21
	cve@mitre.org	http://www.securityfocus.com/bid/75267
	cve@mitre.org	http://www.securitytracker.com/id/1035023
	af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html
	af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html
	af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2015/06/08/3
	af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2015/06/09/1
	af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2015/06/16/21
	af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75267
	af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1035023

Impacted products

Vendor	Product	Version
fedoraproject	fedora	21
fedoraproject	fedora	22
opensuse	opensuse	13.1
opensuse	opensuse	13.2
polkit_project	polkit	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
              "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
              "matchCriteriaId": "253C303A-E577-4488-93E6-68A8DD942C38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "154D0301-B371-4F38-9DD5-EDBE487A37C8",
              "versionEndIncluding": "0.112",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de entero en la funci\u00f3n authentication_agent_new_cookie en PolicyKit (tambi\u00e9n conocido como polkit) en versiones anteriores a 0.113 permite a usuarios locales obtener privilegios mediante la creaci\u00f3n de un n\u00famero de conexiones grande, lo que desencadena la emisi\u00f3n de un valor de cookie duplicado."
    }
  ],
  "id": "CVE-2015-4625",
  "lastModified": "2026-06-17T00:27:37.233",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-10-26T19:59:05.733",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/75267"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1035023"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/75267"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1035023"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-M24Q-4952-3P5H

Vulnerability from github – Published: 2022-05-14 02:07 – Updated: 2022-05-14 02:07

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-4625"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-10-26T19:59:00Z",
    "severity": "MODERATE"
  },
  "details": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.",
  "id": "GHSA-m24q-4952-3p5h",
  "modified": "2022-05-14T02:07:39Z",
  "published": "2022-05-14T02:07:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4625"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75267"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1035023"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2015-4625

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2015-4625

Aliases

CVE-2015-4625

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-4625",
    "description": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.",
    "id": "GSD-2015-4625",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-4625.html",
      "https://ubuntu.com/security/CVE-2015-4625",
      "https://advisories.mageia.org/CVE-2015-4625.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-4625"
      ],
      "details": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.",
      "id": "GSD-2015-4625",
      "modified": "2023-12-13T01:19:59.944192Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-4625",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "[polkit-devel] 20150603 Agent Authentication Question",
            "refsource": "MLIST",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
          },
          {
            "name": "75267",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/75267"
          },
          {
            "name": "FEDORA-2015-11058",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
          },
          {
            "name": "openSUSE-SU-2015:1927",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
          },
          {
            "name": "FEDORA-2015-11743",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
          },
          {
            "name": "[polkit-devel] 20150702 polkit-0.113 released",
            "refsource": "MLIST",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
          },
          {
            "name": "[oss-security] 20150609 Re: CVE request for polkit",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
          },
          {
            "name": "openSUSE-SU-2015:1734",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
          },
          {
            "name": "[oss-security] 20150608 CVE request for polkit",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
          },
          {
            "name": "[polkit-devel] 20150529 Agent Authentication Question",
            "refsource": "MLIST",
            "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
          },
          {
            "name": "[oss-security] 20150616 Re: CVE request for polkit",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
          },
          {
            "name": "1035023",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1035023"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "0.112",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4625"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-189"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "openSUSE-SU-2015:1734",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html"
            },
            {
              "name": "[oss-security] 20150616 Re: CVE request for polkit",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2015/06/16/21"
            },
            {
              "name": "[polkit-devel] 20150702 polkit-0.113 released",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html"
            },
            {
              "name": "[oss-security] 20150609 Re: CVE request for polkit",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2015/06/09/1"
            },
            {
              "name": "75267",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/75267"
            },
            {
              "name": "[polkit-devel] 20150529 Agent Authentication Question",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
            },
            {
              "name": "FEDORA-2015-11743",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html"
            },
            {
              "name": "FEDORA-2015-11058",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html"
            },
            {
              "name": "[oss-security] 20150608 CVE request for polkit",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
            },
            {
              "name": "[polkit-devel] 20150603 Agent Authentication Question",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000427.html"
            },
            {
              "name": "1035023",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1035023"
            },
            {
              "name": "openSUSE-SU-2015:1927",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-30T16:27Z",
      "publishedDate": "2015-10-26T19:59Z"
    }
  }
}

OPENSUSE-SU-2024:10436-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

libpolkit0-0.113-3.4 on GA media

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2015-4625.

CVE-2015-4625

Recommended: 24 products

Open the full advisory

SUSE-SU-2015:1838-1

Vulnerability from csaf_suse - Published: 2015-10-22 07:44 - Updated: 2015-10-22 07:44

Summary

Security update for polkit

Severity

Moderate

Scope

4 vulnerabilities in this advisory, including CVE-2015-4625.

CVE-2015-4625

Recommended: 26 products

Open the full advisory

UBUNTU-CVE-2015-4625 (CVE-2015-4625)

Vulnerability from osv_ubuntu – Published: 2015-10-26 00:00 – Updated: 2026-04-22 07:37 – Source website

Details

Severity

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2015-4625	REPORT
	http://lists.freedesktop.org/archives/polkit-deve…	REPORT
	http://lists.freedesktop.org/archives/polkit-deve…	REPORT
	http://www.openwall.com/lists/oss-security/2015/06/08/3	REPORT
	https://ubuntu.com/security/notices/USN-3717-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2015-4625	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gir1.2-polkit-1.0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-agent-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-backend-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "libpolkit-gobject-1-0",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          },
          {
            "binary_name": "policykit-1",
            "binary_version": "0.105-4ubuntu3.14.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "policykit-1",
        "purl": "pkg:deb/ubuntu/policykit-1@0.105-4ubuntu3.14.04.2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.105-4ubuntu3.14.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.105-3ubuntu3",
        "0.105-4ubuntu1",
        "0.105-4ubuntu2",
        "0.105-4ubuntu2.14.04.1",
        "0.105-4ubuntu3.14.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.",
  "id": "UBUNTU-CVE-2015-4625",
  "modified": "2026-04-22T07:37:48Z",
  "published": "2015-10-26T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4625"
    },
    {
      "type": "REPORT",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-May/000419.html"
    },
    {
      "type": "REPORT",
      "url": "http://lists.freedesktop.org/archives/polkit-devel/2015-June/000425.html"
    },
    {
      "type": "REPORT",
      "url": "http://www.openwall.com/lists/oss-security/2015/06/08/3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3717-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4625"
    }
  ],
  "related": [
    "USN-3717-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2015-4625"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2015-4625 (GCVE-0-2015-4625)

BDU:2015-11967 (CVE-2015-4625)

CNVD-2015-03960

FKIE_CVE-2015-4625

GHSA-M24Q-4952-3P5H

GSD-2015-4625

OPENSUSE-SU-2024:10436-1

SUSE-SU-2015:1838-1

UBUNTU-CVE-2015-4625 (CVE-2015-4625)

Tags

Sightings

Nomenclature

Related by attack behaviour