Red Hat Enterprise Linux 7/polkit

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
polkit: Heap-corruption on duplicate idsCVE-2015-3255	Red Hat Enterprise Linux 6/polkit Red Hat Enterprise Linux 7/polkit	Red Hat	Medium	No fix reported	Not recorded
polkit: potential information disclosure vulnerability due to cookie counter wrappingCVE-2015-4625	Red Hat Enterprise Linux 6/polkit Red Hat Enterprise Linux 7/polkit	Red Hat	Low	No fix reported	Not recorded
polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgentCVE-2015-3218	Red Hat Enterprise Linux 7/polkit	Red Hat	Low	No fix reported	Not recorded
polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctlCVE-2016-2568	Red Hat Enterprise Linux 6/polkit Red Hat Enterprise Linux 7/polkit	Red Hat	Medium	No fix reported	Not recorded
polkit: XML policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519	Red Hat Enterprise Linux 10/polkit Red Hat Enterprise Linux 6/polkit	Red Hat	Medium	No fix reported	Not recorded
polkit: Polkit: Denial of Service via unbounded input processing through standard inputCVE-2026-4897	Red Hat Enterprise Linux 6/polkit Red Hat Enterprise Linux 7/polkit	Red Hat	Medium	No fix reported	Not recorded
polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflowCVE-2026-85498	Red Hat Enterprise Linux 10/polkit-pkla-compat Red Hat Enterprise Linux 10/polkit	Red Hat	Low	No fix reported	Not recorded