Lucene search
PRIOn knowledge basePRION:CVE-2018-19788HistoryDec 03, 2018 - 6:29 a.m.
Command injection
2018-12-0306:29:00
PRIOn knowledge base
www.prio-n.com
6
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| polkit | eq | 0.115 |
References
access.redhat.com/errata/RHSA-2019:2046
access.redhat.com/errata/RHSA-2019:3232
bugs.debian.org/915332
gitlab.freedesktop.org/polkit/polkit/issues/74
lists.debian.org/debian-lts-announce/2019/01/msg00021.html
security.gentoo.org/glsa/201908-14
usn.ubuntu.com/3861-1/
usn.ubuntu.com/3861-2/
www.debian.org/security/2018/dsa-4350
Related
nessus
nessus
EulerOS 2.0 SP2 : polkit (EulerOS-SA-2019-1752)
2019-07-22 00:00:00
openSUSE Security Update : polkit (openSUSE-2019-10)
2019-01-11 00:00:00
Fedora 28 : polkit (2018-4ac3c68ee4)
2019-01-03 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2314)
2020-01-23 00:00:00
Fedora Update for polkit FEDORA-2019-e957cecffd
2019-05-07 00:00:00
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2042)
2020-01-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package polkit version 0.115-alt4
2018-12-06 00:00:00
Security fix for the ALT Linux 9 package polkit version 0.115-alt5
2019-01-09 00:00:00
ubuntu
ubuntu
PolicyKit vulnerability
2019-01-16 00:00:00
PolicyKit vulnerability
2019-01-16 00:00:00
cvelist
cvelist
CVE-2018-19788
2018-12-03 06:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: polkit-0.115-4.1.fc29
2018-12-10 02:32:09
[SECURITY] Fedora 29 Update: polkit-0.115-4.2.fc29
2019-01-13 02:32:29
[SECURITY] Fedora 28 Update: polkit-0.115-2.fc28
2018-12-11 01:58:34
suse
suse
Security update for polkit (moderate)
2018-12-28 21:12:00
Security update for polkit (moderate)
2019-01-11 00:00:00
amazon
amazon
Medium: polkit
2019-10-21 18:01:00
centos
centos
polkit security update
2019-08-30 03:59:01
cve
cve
CVE-2018-19788
2018-12-03 06:29:00
nvd
nvd
CVE-2018-19788
2018-12-03 06:29:00
redhatcve
redhatcve
CVE-2018-19788
2019-12-31 09:42:12
debian
debian
[SECURITY] [DSA 4350-1] policykit-1 security update
2018-12-06 21:30:03
[SECURITY] [DLA 1644-1] policykit-1 security update
2019-01-28 13:05:06
redhat
redhat
(RHSA-2019:3232) Moderate: polkit security update
2019-10-29 12:01:09
(RHSA-2019:2046) Moderate: polkit security and bug fix update
2019-08-06 07:54:53
thn
thn
Warning! Unprivileged Linux Users With UID > INT_MAX Can Execute Any Command
2018-12-06 16:03:00
ubuntucve
ubuntucve
CVE-2018-19788
2018-12-03 00:00:00
veracode
veracode
Command Execution
2018-12-08 03:41:13
osv
osv
policykit-1 - security update
2018-12-06 00:00:00
CVE-2018-19788
2018-12-03 06:29:00
policykit-1 - security update
2019-01-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-19788
2018-12-03 06:29:00
archlinux
archlinux
[ASA-201901-2] polkit: privilege escalation
2019-01-08 00:00:00
debiancve
debiancve
CVE-2018-19788
2018-12-03 06:29:00
f5
f5
K91040959 : Polkit vulnerabilities CVE-2018-1116 and CVE-2018-19788
2022-03-14 00:00:00
gentoo
gentoo
polkit: Multiple vulnerabilities
2019-08-15 00:00:00
oraclelinux
oraclelinux
polkit security and bug fix update
2019-08-13 00:00:00
photon
photon
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01