Unprivileged user with UID greater than INT_MAX can run any Systemd command

2,795 views · Published 13 December 2018 · 4:56 · Indexed 25 October 2026

Channel: quidsup · 2018 · Science & Technology

Watch on YouTube

Linux Security News - A bug in PolicyKit in Linux means an unprivileged user with UID greater than INT_MAX can run any Systemctl command without providing authentication. CVE 2018-19788

#Linux #Systemd #Vulnerability

Sources:
https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-19788.html
https://thehackernews.com/2018/12/linux-user-privilege-policykit.html
https://access.redhat.com/security/cve/cve-2018-19788
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19788
https://github.com/AbsoZed/CVE-2018-19788/blob/master/CVE-2018-19788_PrivEsc.sh
https://gitlab.freedesktop.org/polkit/polkit/issues/74
https://nvd.nist.gov/vuln/detail/CVE-2018-19788


Like my channel? Please help support it:
Patreon: https://www.patreon.com/quidsup
Paypal: https://www.paypal.me/quidsup

Follow me on Social Media
Twitter: https://twitter.com/quidsup
MeWe: https://mewe.com/i/quidsup 
Minds: https://minds.com/quidsup

More from this channel