VULNERABILITY INTELLIGENCE
CVE-2015-4625
CVSS score4.6 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2015-10-26
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.