The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Polkit | Polkit_project | * | 0.112 (including) |
| Policykit-1 | Ubuntu | precise | * |
| Policykit-1 | Ubuntu | precise/esm | * |
| Policykit-1 | Ubuntu | trusty | * |
| Policykit-1 | Ubuntu | upstream | * |
| Policykit-1 | Ubuntu | utopic | * |
| Policykit-1 | Ubuntu | vivid | * |
| Policykit-1 | Ubuntu | vivid/stable-phone-overlay | * |