CVE-2015-3218

Name of the Vulnerable Software and Affected Versions PolicyKit (aka polkit) versions prior to 0.113

Description The issue allows local users to cause a denial of service, resulting in a NULL pointer dereference and a crash of the polkitd daemon. This is achieved by calling the RegisterAuthenticationAgent function with an invalid object path, specifically through the authentication agent new function in polkitbackend/polkitbackendinteractiveauthority.c.

Recommendations For versions prior to 0.113, update to version 0.113 or later to resolve the issue.