An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade PackageKit-yumUpgrade PackageKit-debuginfoUpgrade PackageKit-glibUpgrade PackageKit-yum-pluginUpgrade PackageKit-cronUpgrade PackageKit-gstreamer-pluginUpgrade PackageKitUpgrade PackageKit-command-not-foundUpgrade PackageKit-gtk3-moduleUpgrade PackageKit-glib-devel | Apr 27, 2020 | Apr 23, 2018 |
| Centos_linux | — | Upgrade PackageKit-command-not-foundUpgrade PackageKit-glib-develUpgrade PackageKit-gstreamer-pluginUpgrade PackageKit-cronUpgrade PackageKit-glibUpgrade PackageKit-gtk3-moduleUpgrade PackageKitUpgrade PackageKit-yum-pluginUpgrade PackageKit-yumUpgrade PackageKit-debuginfo | Jun 1, 2018 | Apr 23, 2018 |
| Debian | — | Upgrade packagekit | May 23, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | May 29, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Jul 3, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp5 | — | — | Dec 27, 2019 | Apr 23, 2018 |
| Oracle_linux | — | Upgrade PackageKitUpgrade PackageKit-cronUpgrade PackageKit-glib-develUpgrade PackageKit-yum-pluginUpgrade PackageKit-yumUpgrade PackageKit-command-not-foundUpgrade PackageKit-gtk3-moduleUpgrade PackageKit-glibUpgrade PackageKit-gstreamer-plugin | Apr 25, 2018 | Apr 23, 2018 |
| Redhat_linux | — | Upgrade PackageKit-glib-develUpgrade PackageKit-gstreamer-pluginUpgrade PackageKitUpgrade PackageKit-debuginfoUpgrade PackageKit-cronUpgrade PackageKit-yumUpgrade PackageKit-yum-pluginUpgrade PackageKit-gtk3-moduleUpgrade PackageKit-command-not-foundUpgrade PackageKit-glib | Apr 25, 2018 | Apr 23, 2018 |
| Suse | — | Upgrade PackageKit-gstreamer-pluginUpgrade PackageKit-develUpgrade typelib-1_0-PackageKitGlib-1_0Upgrade PackageKitUpgrade libpackagekit-glib2-18Upgrade PackageKit-backend-zyppUpgrade PackageKit-langUpgrade PackageKit-gtk3-moduleUpgrade libpackagekit-glib2-devel | Apr 25, 2018 | Apr 23, 2018 |
| Ubuntu | — | Upgrade packagekit | May 9, 2018 | Apr 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub