CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages...

Original description

The description as published by the source.

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-1106 packagekit Fixed in: 1.1.10-1

References

advisory openwall.com
advisory access.redhat.com
advisory usn.ubuntu.com
advisory debian.org
report bugzilla.redhat.com