Lucene search
Veracode Vulnerability DatabaseVERACODE:22877HistoryApr 01, 2020 - 12:38 a.m.
Memory Leaks
2020-04-0100:38:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
29.3%
The polkit is vulnerable memory leaks. The attack is possible because it performs an improper authorization in the polkit_backend_interactive_authority_check_authorization function in polkitd.
| CPE | Name | Operator | Version |
|---|---|---|---|
| polkit | eq | 0.112__18.el7_6.1 | |
| polkit | eq | 0.112__22.el7 | |
| polkit | eq | 0.112__22.el7_7.1 | |
| polkit | eq | 0.112__18.el7 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
access.redhat.com/errata/RHSA-2020:1135
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1753037
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1116
cgit.freedesktop.org/polkit/commit/?id=bc7ffad5364
lists.debian.org/debian-lts-announce/2018/07/msg00042.html
security.gentoo.org/glsa/201908-14
usn.ubuntu.com/3717-2/
Related
nessus
nessus
openSUSE Security Update : polkit (openSUSE-2019-579)
2019-03-27 00:00:00
openSUSE Security Update : polkit (openSUSE-2018-735)
2018-07-20 00:00:00
SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2018:2165-1)
2019-01-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2651)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2165-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for polkit (openSUSE-SU-2018:2284-1)
2018-10-26 00:00:00
centos
centos
polkit security update
2020-04-08 19:07:01
osv
osv
policykit-1 - security update
2018-07-28 00:00:00
CVE-2018-1116
2018-07-10 19:29:00
amazon
amazon
Low: polkit
2020-06-16 18:05:00
fedora
fedora
[SECURITY] Fedora 27 Update: polkit-0.113-16.fc27
2018-07-31 17:13:50
[SECURITY] Fedora 28 Update: polkit-0.115-1.fc28
2018-07-13 17:35:04
[SECURITY] Fedora 28 Update: polkit-0.115-2.fc28
2018-12-11 01:58:34
cve
cve
CVE-2018-1116
2018-07-10 19:29:00
prion
prion
Information disclosure
2018-07-10 19:29:00
suse
suse
Security update for polkit (moderate)
2018-07-20 03:13:54
Security update for polkit (moderate)
2018-08-10 03:08:24
altlinux
altlinux
Security fix for the ALT Linux 9 package polkit version 0.115-alt1
2018-07-10 00:00:00
redhat
redhat
(RHSA-2020:1135) Low: polkit security and bug fix update
2020-03-31 09:23:14
oraclelinux
oraclelinux
polkit security and bug fix update
2020-04-06 00:00:00
debiancve
debiancve
CVE-2018-1116
2018-07-10 19:29:00
ubuntucve
ubuntucve
CVE-2018-1116
2018-07-10 00:00:00
nvd
nvd
CVE-2018-1116
2018-07-10 19:29:00
redhatcve
redhatcve
CVE-2018-1116
2018-07-10 15:48:45
debian
debian
[SECURITY] [DLA-1448-1] policykit-1 security update
2018-07-28 00:38:36
cvelist
cvelist
CVE-2018-1116
2018-07-10 19:00:00
ubuntu
ubuntu
PolicyKit vulnerabilities
2018-07-17 00:00:00
PolicyKit vulnerabilities
2018-07-16 00:00:00
f5
f5
K91040959 : Polkit vulnerabilities CVE-2018-1116 and CVE-2018-19788
2022-03-14 00:00:00
gentoo
gentoo
polkit: Multiple vulnerabilities
2019-08-15 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-2.0-0205
2020-02-08 00:00:00
Important Photon OS Security Update - PHSA-2020-0205
2020-02-03 00:00:00
Critical Photon OS Security Update - PHSA-2019-0036
2019-10-23 00:00:00
