CVE-2018-1116

Name of the Vulnerable Software and Affected Versions polkit versions prior to 0.116

Description A flaw in the implementation of the polkit backend interactive authority check authorization function in polkitd allows testing for authentication and triggering authentication of unrelated processes owned by other users. This may result in a local denial of service and information disclosure.

Recommendations For versions prior to 0.116, update to version 0.116 or later to resolve the issue. As a temporary workaround, consider restricting access to the polkit backend interactive authority check authorization function to minimize the risk of exploitation.