{"id":"CVE-2018-19788","aliases":["ALPINE-CVE-2018-19788","DEBIAN-CVE-2018-19788","DLA-1644-1","DSA-4350-1","EUVD-2018-11469","GHSA-4569-2jp2-r7vf","RHSA-2019:2046","RHSA-2019:3232","SUSE-SU-2019:0015-1","SUSE-SU-2019:0019-1","SUSE-SU-2019:0019-2","UBUNTU-CVE-2018-19788","USN-3861-1","openSUSE-SU-2019:0010-1","openSUSE-SU-2024:11180-1"],"status":"published","title":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than...","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.11575,"percentile":0.96063,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2018-12-03T00:00:00Z","modified":"2026-10-23T18:03:04Z","exploits":[{"source":"pocgithub","id":"AbsoZed/CVE-2018-19788","title":"AbsoZed/CVE-2018-19788","date":"2018-12-07","url":"https://github.com/AbsoZed/CVE-2018-19788"},{"source":"pocgithub","id":"d4gh0s7/CVE-2018-19788","title":"d4gh0s7/CVE-2018-19788","date":"2018-12-07","url":"https://github.com/d4gh0s7/CVE-2018-19788"},{"source":"pocgithub","id":"Ekultek/PoC","title":"Ekultek/PoC","date":"2018-12-17","url":"https://github.com/Ekultek/PoC"},{"source":"pocgithub","id":"jhlongjr/CVE-2018-19788","title":"jhlongjr/CVE-2018-19788","date":"2018-12-31","url":"https://github.com/jhlongjr/CVE-2018-19788"}],"fixes":[{"ecosystem":"Alpine:v3.6","package":"polkit","fixed_in":["0.105-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"polkit","fixed_in":["0.105-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"polkit","fixed_in":["0.105-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"polkit","fixed_in":["0.105-r9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"policykit-1","fixed_in":["0.105-23"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"policykit-1","fixed_in":["0.105-23"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"policykit-1","fixed_in":["0.105-23"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"policykit-1","fixed_in":["0.105-18+deb9u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-devel","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-docs","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-devel","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-docs","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-devel","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-docs","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-devel","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-docs","fixed_in":["0:0.112-22.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-debuginfo","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-devel","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-docs","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-debuginfo","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-devel","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-docs","fixed_in":["0:0.112-18.el7_6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"polkit","fixed_in":["0.114-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"polkit","fixed_in":["0.113-5.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"policykit-1","fixed_in":["0.105-4ubuntu3.14.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"policykit-1","fixed_in":["0.105-14.1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","fixed_in":["0.105-20ubuntu0.18.04.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"polkit","fixed_in":["0.114-lp150.2.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-r9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-23"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-23"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-23"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-15~deb8u4"}]}],"versions":["0.105-10","0.105-11","0.105-12","0.105-13","0.105-14","0.105-14.1","0.105-15~deb8u1","0.105-15~deb8u2","0.105-15~deb8u3","0.105-8","0.105-9"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-18+deb9u1"}]}],"versions":["0.105-18"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-4ubuntu3.14.04.5"}]}],"versions":["0.105-3ubuntu3","0.105-4ubuntu1","0.105-4ubuntu2","0.105-4ubuntu2.14.04.1","0.105-4ubuntu3.14.04.1","0.105-4ubuntu3.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.4"}]}],"versions":["0.105-11ubuntu2","0.105-13","0.105-13ubuntu1","0.105-14","0.105-14.1","0.105-14.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-20ubuntu0.18.04.4"}]}],"versions":["0.105-18","0.105-20","0.105-20ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-4ubuntu3.14.04.5"}]}],"versions":["0.105-3ubuntu3","0.105-4ubuntu1","0.105-4ubuntu2","0.105-4ubuntu2.14.04.1","0.105-4ubuntu3.14.04.1","0.105-4ubuntu3.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.4"}]}],"versions":["0.105-11ubuntu2","0.105-13","0.105-13ubuntu1","0.105-14","0.105-14.1","0.105-14.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-20ubuntu0.18.04.4"}]}],"versions":["0.105-18","0.105-20","0.105-20ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-lp150.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.118-7.2"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"polkit_project","product":"polkit"}],"references":[{"url":"https://usn.ubuntu.com/3861-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3861-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugs.debian.org/915332","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://gitlab.freedesktop.org/polkit/polkit/issues/74","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2018/dsa-4350","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2046","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201908-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3232","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240816-0001/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19788","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4569-2jp2-r7vf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-19788","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-19788","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655925","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2046.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19788","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3232.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190015-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118277","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19788","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190019-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190019-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-19788","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3861-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3861-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6OKC663KCCSTWAYHTLR6YG6QB4LCIPIQ/#6OKC663KCCSTWAYHTLR6YG6QB4LCIPIQ","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3560","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:00:00Z","modified":"2024-08-29T15:55:31.505Z","updated_at":"2026-11-02T14:35:02.966615Z"}],"euvd":[{"id":"EUVD-2018-11469","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:00:00Z","modified":"2024-08-29T15:55:31Z","updated_at":"2026-11-03T00:56:07.856103Z"}],"ghsa":[{"id":"GHSA-4569-2jp2-r7vf","title":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than...","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2022-05-14T00:54:45Z","modified":"2023-02-02T05:02:39Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:29.373702Z"}],"nvd":[{"id":"CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:29:00.243Z","modified":"2026-06-17T01:49:52.97Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:49.995593Z"}],"osv":[{"id":"ALPINE-CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:29:00.243Z","modified":"2026-10-23T17:24:33.552901404Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:29:00.243Z","modified":"2026-10-20T10:51:24.59704721Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.834469Z"},{"id":"DEBIAN-CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T06:29:00.243Z","modified":"2026-10-23T18:03:04.155034096Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"RHSA-2019:2046","title":"Red Hat Security Advisory: polkit security and bug fix update","status":"published","published":"2024-09-16T01:55:25Z","modified":"2026-06-26T10:42:45Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3232","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-16T01:55:31Z","modified":"2026-06-26T10:44:28Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-19788","description":"A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.","status":"published","published":"2018-12-03T00:00:00Z","modified":"2026-04-22T11:51:26.695831Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"DLA-1644-1","title":"policykit-1 - security update","status":"published","published":"2019-01-28T00:00:00Z","modified":"2026-03-09T01:18:22.719117Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4350-1","title":"policykit-1 - security update","status":"published","published":"2018-12-06T00:00:00Z","modified":"2026-03-09T02:11:14.319187Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2019:0010-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:42:34Z","modified":"2026-02-04T04:39:00.114527Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11180-1","title":"libpolkit0-0.118-7.2 on GA media","description":"These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:33.348342Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0015-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277)\n","status":"published","published":"2019-01-03T10:28:14Z","modified":"2026-02-04T03:56:17.300062Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0019-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277)\n","status":"published","published":"2019-01-04T11:38:24Z","modified":"2026-02-04T04:23:17.223081Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0019-2","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277)\n","status":"published","published":"2019-04-26T20:46:23Z","modified":"2026-02-04T04:18:09.897341Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3861-1","title":"policykit-1 vulnerability","description":"It was discovered that PolicyKit incorrectly handled certain large user\nUIDs. A local attacker with a large UID could possibly use this issue to\nperform privileged actions.\n","status":"published","published":"2019-01-16T18:18:58Z","modified":"2026-04-22T09:54:29.706293Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}