← Back to CVEs

CVE-2018-19788

N/A

Description

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.

CVE Details

CVSS v3.1 ScoreN/A

Published12/3/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

canonical:ubuntu_linuxdebian:debian_linuxpolkit_project:polkit

Weaknesses (CWE)

CWE-20

References

https://access.redhat.com/errata/RHSA-2019:2046(cve@mitre.org)

https://access.redhat.com/errata/RHSA-2019:3232(cve@mitre.org)

https://bugs.debian.org/915332(cve@mitre.org)

https://gitlab.freedesktop.org/polkit/polkit/issues/74(cve@mitre.org)

https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html(cve@mitre.org)

https://security.gentoo.org/glsa/201908-14(cve@mitre.org)

https://usn.ubuntu.com/3861-1/(cve@mitre.org)

https://usn.ubuntu.com/3861-2/(cve@mitre.org)

https://www.debian.org/security/2018/dsa-4350(cve@mitre.org)

https://access.redhat.com/errata/RHSA-2019:2046(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2019:3232(af854a3a-2127-422b-91ae-364da2661108)

https://bugs.debian.org/915332(af854a3a-2127-422b-91ae-364da2661108)

https://gitlab.freedesktop.org/polkit/polkit/issues/74(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201908-14(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20240816-0001/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3861-1/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3861-2/(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2018/dsa-4350(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.