CVE-2018-19788: Input Validation
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command.
Other sources
It was found that creating a user of group above INT32MAX would wrap around the numeric uid or gid. Polkit is not able to handle this properly, resulting in an authentication bypass.
References:
https://seclists.org/oss-sec/2018/q4/198
Upstream issue:
https://gitlab.freedesktop.org/polkit/polkit/issues/74
Proposed patch:
https://gitlab.freedesktop.org/zbyszek/polkit/commit/fbaab32cb4ed9ed5f1e3eea6cd317d443aa427dc
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-19788?
CVE-2018-19788 is a vulnerability found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to execute any systemctl command.
What is the severity of CVE-2018-19788?
The severity of CVE-2018-19788 is critical, with a severity value of 8.8.
Which software versions are affected by CVE-2018-19788?
Software versions affected by CVE-2018-19788 include Polkit 0.115, Debian Linux 8.0, Debian Linux 9.0, and various versions of Ubuntu Linux.
How can I fix CVE-2018-19788?
To fix CVE-2018-19788, update to a patched version of the affected software.
Where can I find more information about CVE-2018-19788?
More information about CVE-2018-19788 can be found at the following references: <br> - [GitLab](https://gitlab.freedesktop.org/polkit/polkit/issues/74) <br> - [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2018-19788) <br> - [Debian Bug Report](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915332)