CVE-2018-19788

概要

参考情報

• access.redhat.com/errata/RHSA-2019:2046
• access.redhat.com/errata/RHSA-2019:3232
• bugs.debian.org/915332 · Issue Tracking
• gitlab.freedesktop.org/polkit/polkit/issues/74 · Exploit
• lists.debian.org/debian-lts-announce/2019/01/msg00021.html · Third Party Advisory
• security.gentoo.org/glsa/201908-14
• usn.ubuntu.com/3861-1 · Third Party Advisory
• usn.ubuntu.com/3861-2 · Third Party Advisory
• debian.org/security/2018/dsa-4350 · Third Party Advisory
• security.netapp.com/advisory/ntap-20240816-0001

polkit のその他の脆弱性

• CVE-2021-4115中 5.5There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The high…
• CVE-2021-3560高 7.8悪用確認済み（CISA KEV）It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor…
• CVE-2021-4034高 7.8悪用確認済み（CISA KEV）A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow u…
• CVE-2019-6133中 6.7In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authoriza…
• CVE-2018-1116中 4.4A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function…