CVE-2018-1116 A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger au...
MediumCVSS 4.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/policykit-1(Debian:12) | < 0.105-21 | 0.105-21 |
| debian/policykit-1(Debian:13) | < 0.105-21 | 0.105-21 |
| debian/policykit-1(Debian:14) | < 0.105-21 | 0.105-21 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| polkit project polkit | < 0.115 | 0.115 |
| [UNKNOWN] polkit | = polkit 0.116 | No fix listed |
References
- Debian Security Tracker CVE-2018-1116 vendor-advisory
- bugzilla.redhat.com issue-tracking patch
- cgit.freedesktop.org patch third-party-advisory
- [debian-lts-announce] 20180728 [SECURITY] [DLA-1448-1] policykit-1 security update mailing-list third-party-advisory
- GLSA-201908-14 third-party-advisory vendor-advisory
- USN-3717-2 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking