CVE-2019-6133

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
polkit_projectpolkit
0.115
debiandebian_linux
8.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.6
redhatenterprise_linux_server_eus
7.6
redhatenterprise_linux_server_tus
7.6
redhatenterprise_linux_workstation
7.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
6.6
redhatenterprise_linux_workstation
6.0
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
canonicalubuntu_linux
18.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
stretch
no-dsa
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
policykit-1
bullseye (security)
0.105-31+deb11u1
fixed
bullseye
0.105-31+deb11u1
fixed
stretch
no-dsa
bookworm
122-3
fixed
sid
125-2
fixed
trixie
125-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
disco
not-affected
cosmic
Fixed 4.18.0-16.17
released
bionic
Fixed 4.15.0-46.49
released
xenial
Fixed 4.4.0-143.169
released
trusty
Fixed 3.13.0-166.216
released
linux-aws
disco
not-affected
cosmic
Fixed 4.18.0-1011.13
released
bionic
Fixed 4.15.0-1033.35
released
xenial
Fixed 4.4.0-1077.87
released
trusty
Fixed 4.4.0-1039.42
released
linux-aws-hwe
disco
dne
cosmic
dne
bionic
dne
xenial
Fixed 4.15.0-1033.35~16.04.1
released
trusty
dne
linux-azure
disco
not-affected
cosmic
Fixed 4.18.0-1013.13
released
bionic
Fixed 4.18.0-1013.13~18.04.1
released
xenial
Fixed 4.15.0-1040.44
released
trusty
Fixed 4.15.0-1040.44~14.04.1
released
linux-azure-edge
disco
dne
cosmic
dne
bionic
Fixed 4.18.0-1013.13~18.04.1
released
xenial
Fixed 4.15.0-1040.44
released
trusty
dne
linux-euclid
disco
dne
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-flo
disco
dne
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gcp
disco
not-affected
cosmic
Fixed 4.18.0-1007.8
released
bionic
Fixed 4.15.0-1028.29
released
xenial
Fixed 4.15.0-1028.29~16.04.1
released
trusty
dne
linux-gcp-edge
disco
dne
cosmic
dne
bionic
Fixed 4.15.0-1028.29
released
xenial
dne
trusty
dne
linux-gke
disco
dne
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gke-4.15
disco
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gke-5.0
disco
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-goldfish
disco
dne
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-grouper
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe
disco
dne
cosmic
dne
bionic
Fixed 4.18.0-16.17~18.04.1
released
xenial
Fixed 4.15.0-46.49~16.04.1
released
trusty
dne
linux-hwe-edge
disco
dne
cosmic
dne
bionic
not-affected
xenial
Fixed 4.15.0-46.49~16.04.1
released
trusty
dne
linux-kvm
disco
not-affected
cosmic
Fixed 4.18.0-1008.8
released
bionic
Fixed 4.15.0-1030.30
released
xenial
Fixed 4.4.0-1041.47
released
trusty
dne
linux-lts-trusty
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-utopic
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
ignored
linux-lts-vivid
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
ignored
linux-lts-wily
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
ignored
linux-lts-xenial
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
Fixed 4.4.0-143.169~14.04.2
released
linux-maguro
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-mako
disco
dne
cosmic
dne
bionic
dne
xenial
ignored
trusty
dne
linux-manta
disco
dne
cosmic
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
disco
not-affected
cosmic
Fixed 4.15.0-1034.39
released
bionic
Fixed 4.15.0-1034.39
released
xenial
ignored
trusty
dne
linux-oracle
disco
not-affected
cosmic
Fixed 4.15.0-1009.11
released
bionic
Fixed 4.15.0-1009.11
released
xenial
Fixed 4.15.0-1009.11~16.04.1
released
trusty
dne
linux-raspi2
disco
not-affected
cosmic
Fixed 4.18.0-1010.12
released
bionic
Fixed 4.15.0-1032.34
released
xenial
Fixed 4.4.0-1104.112
released
trusty
dne
linux-snapdragon
disco
not-affected
cosmic
dne
bionic
Fixed 4.15.0-1053.57
released
xenial
Fixed 4.4.0-1108.113
released
trusty
dne
policykit-1
disco
Fixed 0.105-25
released
cosmic
Fixed 0.105-21ubuntu0.4
released
bionic
Fixed 0.105-20ubuntu0.18.04.5
released
xenial
Fixed 0.105-14.1ubuntu0.5
released
trusty
Fixed 0.105-4ubuntu3.14.04.6
released
References