CVE-2018-19788

PoC —

CVSS 3.0

8.8 high

EPSS

11%p96

Published

Dec 3, 2018 (Dec 3, 2018)

Modified

Jun 17, 2026

Description

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.

Vendors: polkit project debian canonical
Products: polkit, debian linux, ubuntu linux
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.5%)

In the news1 stories

Warning! Unprivileged Linux Users With UID > INT_MAX Can Execute Any Command

The Hacker NewsDec 6, 16:17 UTC · Dec 6, 2018Exploit / PoC CVE-2018-19788

50