Non évaluée
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decis...
CVE-2019-6133
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2019-6133 linux Corrigé dans: 4.19.16-1
- Ubuntu UBUNTU-CVE-2019-6133 linux Corrigé dans: 3.13.0-166.216
Description d'origine La description telle que publiée par la source (souvent en anglais).
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
Références
- advisory securityfocus.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory lists.debian.org
- advisory support.f5.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- patch git.kernel.org
- patch gitlab.freedesktop.org
- patch gitlab.freedesktop.org
- report bugs.chromium.org
- web lists.opensuse.org
- web lists.debian.org
- web lists.debian.org
- web usn.ubuntu.com