Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

Ubuntu 21.10, 20.04 LTS USN-5304-1 Moderate: PolicyKit DoS

ubuntu
Calendar Grey February 28, 2022
Dist Ubuntu Esm H88
The Debian Security Advisory DSA-5001-1 emphasizes a Node.js flaw that might lead to information disclosure via manipulated inputs.
policykit-1 could be made to crash if it received specially crafted data.

Summary

policykit-1 could be made to crash if it received specially crafted data.

Software Description:

- policykit-1: framework for managing administrative policies and privileges

Details:

Kevin Backhouse discovered that PolicyKit incorrectly handled file

descriptors. A local attacker could possibly use this issue to cause

PolicyKit to crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory moderate denial of service ubuntu policykit

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  policykit-1                     0.105-31ubuntu0.2

Ubuntu 20.04 LTS:
  policykit-1                     0.105-26ubuntu1.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5304-1

CVE-2021-4115

Severity
important
Lowest
Low
Medium
High
Critical

February 28, 2022

Topics%20covered

Topics Covered

security advisory moderate denial of service ubuntu policykit

Package Information

https://launchpad.net/ubuntu/+source/policykit-1/0.105-31ubuntu0.2
https://launchpad.net/ubuntu/+source/policykit-1/0.105-26ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.