CVE-2015-3218

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.

Date published : 2015-10-26

http://www.securityfocus.com/bid/76086

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html