CVE-2018-19788

NONE EPSS 95.5%

Published Dec 3, 20187y ago · Modified Jun 17, 20262w ago

Published Dec 3, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.

EPSS Exploit Probability

95.5% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

CWE-20 Improper Input Validation Validation

Vendor	Product	Version	Range
polkit_project	polkit	0.115	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any
canonical	ubuntu_linux	12.04	any
canonical	ubuntu_linux	14.04	any
canonical	ubuntu_linux	16.04	any
canonical	ubuntu_linux	18.04	any
canonical	ubuntu_linux	18.10	any

access.redhat.com https://access.redhat.com/errata/RHSA-2019:2046
access.redhat.com https://access.redhat.com/errata/RHSA-2019:3232
bugs.debian.org https://bugs.debian.org/915332

Issue TrackingMailing ListThird Party Advisory
gitlab.freedesktop.org https://gitlab.freedesktop.org/polkit/polkit/issues/74

ExploitPatchThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html

Third Party Advisory
security.gentoo.org https://security.gentoo.org/glsa/201908-14
security.netapp.com https://security.netapp.com/advisory/ntap-20240816-0001/
usn.ubuntu.com https://usn.ubuntu.com/3861-1/

Third Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3861-2/

Third Party Advisory
debian.org https://www.debian.org/security/2018/dsa-4350

Third Party Advisory

gitlab.freedesktop.org https://gitlab.freedesktop.org/polkit/polkit/issues/74

ExploitPatchThird Party Advisory