Improper resource allocation In policykit-1
Description
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 0.105-31+deb11u2 | ||
 rpm rhel7 | - | - | |
rpm rhel8 | - | - | |
rpm rhel6 | - | - | |
rpm rhel9 | - | - | |
debian 13 | - | ||
debian 12 | - | ||
debian 14 | 127-3 | ||
rpm rhel10 | - | - |
Aliases
1. 2. 3. 4. 5.