A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade polkit-debuginfoUpgrade polkit-docsUpgrade polkit-develUpgrade polkit | Jun 18, 2020 | Jul 10, 2018 |
| Centos_linux | — | Upgrade polkit-develUpgrade polkit-debuginfoUpgrade polkitUpgrade polkit-docs | Apr 1, 2020 | Jul 10, 2018 |
| Debian | — | Upgrade policykit-1 | Feb 19, 2019 | Jul 10, 2018 |
| Gentoo Linux | — | Upgrade sys-auth/polkit. | Aug 16, 2019 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade polkit-develUpgrade polkit-docsUpgrade polkit | Dec 4, 2019 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade polkitUpgrade polkit-docsUpgrade polkit-devel | Dec 18, 2019 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade polkit-develUpgrade polkitUpgrade polkit-docs | Nov 19, 2019 | Jul 10, 2018 |
| Oracle Solaris | — | Upgrade system/library/polkit to version 0.113-11.4.9.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.22.6-11.4.9.0.1.1.0 on Solaris 11.4 | May 30, 2019 | Jul 10, 2018 |
| Oracle_linux | — | Upgrade polkitUpgrade polkit-develUpgrade polkit-docs | Oct 5, 2022 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade polkit-docsUpgrade polkit-debuginfoUpgrade polkitUpgrade polkit-develNo solution exists | Apr 1, 2020 | Jul 10, 2018 |
| Suse | — | Upgrade polkit-docUpgrade polkitUpgrade libpolkit0Upgrade polkit-develUpgrade typelib-1_0-Polkit-1_0Upgrade libpolkit0-32bit | Jul 20, 2018 | Jul 10, 2018 |
| Ubuntu | — | Upgrade libpolkit-backend-1-0 | Jul 26, 2018 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub