USN-3607-1: Screen Resolution Extra vulnerability
Published Mar 26, 2018
·Updated
It was discovered that Screen Resolution Extra was using PolicyKit in an unsafe manner. A local attacker could potentially exploit this issue to bypass intended PolicyKit authorizations.
Affected Software
6 affected componentsFixes available
All of the following
ubuntu/screen-resolution-extra<0.17.1.1
0.17.1.1
Ubuntu Ubuntu=17.10
All of the following
ubuntu/screen-resolution-extra<0.17.1.1~16.04.1
0.17.1.1~16.04.1
Ubuntu Ubuntu=16.04
All of the following
ubuntu/screen-resolution-extra<0.17.1.1~14.04.1
0.17.1.1~14.04.1
Ubuntu Ubuntu=14.04
Event History
Mar 26, 2018
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-3607-1?
The severity of USN-3607-1 is considered high due to the potential exploitation by local attackers.
2
How do I fix USN-3607-1?
To fix USN-3607-1, update the screen-resolution-extra package to the latest version available for your Ubuntu release.
3
Which versions of Ubuntu are affected by USN-3607-1?
USN-3607-1 affects Ubuntu versions 14.04, 16.04, and 17.10, specifically with screen-resolution-extra versions up to 0.17.1.1.
4
What kind of exploit does USN-3607-1 enable?
USN-3607-1 enables a local attacker to potentially bypass intended PolicyKit authorizations.
5
Is there a known CVE associated with USN-3607-1?
Yes, USN-3607-1 is associated with CVE-2018-8885.