Authentication Bypass Vulnerability in PackageKit: CVE-2018-1106
Summary
CVE-2018-1106: An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. Affects packagekit across 2 version ranges.
< 1.1.10-1
< 9bdb409daf79ac71ed191faaf2635a6daa848ace
Fixed in 1.1.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PackageKit is a system designed to manage software installation and updates on Linux-based operating systems. It provides a unified interface for various package management systems, allowing users to install, update, and remove software packages easily. The vulnerability identified as CVE-2018-1106 affects PackageKit versions prior to 1.1.10, enabling users without administrative privileges to install signed packages, which poses a significant security risk.
Vulnerability Detail
CVE-2018-1106 is an authentication bypass flaw that allows local attackers to install vulnerable packages without requiring administrator privileges. This vulnerability originates from improper access controls within PackageKit, which fails to adequately restrict package installation to authorized users. If exploited, this could lead to further system compromise, as attackers may install malicious or vulnerable packages that can be leveraged for additional attacks.
How To Fix
Minimum fixed version
1.1.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade packagekitTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the PackageKit service by modifying user permissions or disabling the service until the package can be updated. This can be done by running:
sudo systemctl stop packagekit.service and sudo systemctl disable packagekit.service.
Conclusion
CVE-2018-1106 represents a significant security risk for users of PackageKit versions prior to 1.1.10. By understanding the nature of this vulnerability and taking appropriate steps to update the software, users can protect their systems from potential exploitation. Utilizing tools like Vulert can further enhance security by monitoring for open-source vulnerabilities in real-time.
See every vulnerability recorded for packagekit →
FAQ
CVE-2018-1106 is an authentication bypass vulnerability in PackageKit that allows unauthorized users to install signed packages.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability can lead to unauthorized package installations, potentially compromising the entire system.
The CVSS score for CVE-2018-1106 is 5.5, indicating a moderate level of severity.
It is recommended to regularly check for and install updates to your packages to mitigate vulnerabilities and enhance security.
Related vulnerabilities
Recent vulnerabilities recorded for packagekit.
