CVE-2018-19788
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
Affected products
n/a · n/aReferences
https://access.redhat.com/errata/RHSA-2019:2046https://access.redhat.com/errata/RHSA-2019:3232https://bugs.debian.org/915332https://gitlab.freedesktop.org/polkit/polkit/issues/74https://lists.debian.org/debian-lts-announce/2019/01/msg00021.htmlhttps://security.gentoo.org/glsa/201908-14https://security.netapp.com/advisory/ntap-20240816-0001/https://usn.ubuntu.com/3861-1/https://usn.ubuntu.com/3861-2/https://www.debian.org/security/2018/dsa-4350