Remote No

Type Privilege escalation

Description

A security issue has been found in polkit <= 0.115, where an unprivileged user with a UID > INT_MAX can successfully execute any systemctl command.

AVG-829 lib32-polkit 0.114-1 High Vulnerable

AVG-828 polkit 0.115+3+g8638ec5-1 0.115+24+g5230646-1 High Fixed

08 Jan 2019 ASA-201901-2 AVG-828 polkit High privilege escalation

https://seclists.org/oss-sec/2018/q4/198
https://gitlab.freedesktop.org/polkit/polkit/issues/74
https://gitlab.freedesktop.org/polkit/polkit/commit/2cb40c4d5feeaa09325522bd7d97910f1b59e379