CVE-2018-19788
Fixed in a distro release EPSS 12%
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
Products: polkit_project polkit, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.6 | polkit | 0.105-r8 |
| Alpine 3.7 | polkit | 0.105-r8 |
| Alpine 3.8 | polkit | 0.105-r9 |
| Alpine 3.9 | polkit | 0.105-r9 |
| Amazon Linux 2 | polkit | 0.112-22.amzn2.1 |
| Amazon Linux 2 | polkit-devel | 0.112-22.amzn2.1 |
| Amazon Linux 2 | polkit-docs | 0.112-22.amzn2.1 |
| Arch Linux | polkit | 0.115+24+g5230646-1 |
| Debian 12 | policykit-1 | 0.105-23 |
| Debian 13 | policykit-1 | 0.105-23 |
| Debian 14 | policykit-1 | 0.105-23 |
| Debian 8 | policykit-1 | 0.105-15~deb8u4 |
| Debian 9 | policykit-1 | 0.105-18+deb9u1 |
| Red Hat Enterprise Linux 7 | polkit | 0:0.112-22.el7 |
| Red Hat Enterprise Linux 7 | polkit-debuginfo | 0:0.112-22.el7 |
| Red Hat Enterprise Linux 7 | polkit-devel | 0:0.112-22.el7 |
| Red Hat Enterprise Linux 7 | polkit-docs | 0:0.112-22.el7 |
| Red Hat rhel eus 7.6 | polkit | 0:0.112-18.el7_6.2 |
| Red Hat rhel eus 7.6 | polkit-debuginfo | 0:0.112-18.el7_6.2 |
| Red Hat rhel eus 7.6 | polkit-devel | 0:0.112-18.el7_6.2 |
| Red Hat rhel eus 7.6 | polkit-docs | 0:0.112-18.el7_6.2 |
| SUSE Enterprise Storage 4 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | polkit | 0.114-3.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server 12 SP4 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server 12-LTSS | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | polkit | 0.113-5.15.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | polkit | 0.113-5.15.1 |
| SUSE OpenStack Cloud 7 | polkit | 0.113-5.15.1 |
| Ubuntu 14.04 LTS | policykit-1 | 0.105-4ubuntu3.14.04.5 |
| Ubuntu 16.04 LTS | policykit-1 | 0.105-14.1ubuntu0.4 |
| Ubuntu 18.04 LTS | policykit-1 | 0.105-20ubuntu0.18.04.4 |
| openSUSE Leap 15.0 | polkit | 0.114-lp150.2.6.1 |
| openSUSE Tumbleweed | polkit | 0.118-7.2 |