Summary
It was discovered that Screen Resolution Extra was using PolicyKit in an
unsafe manner. A local attacker could potentially exploit this issue to
bypass intended PolicyKit authorizations.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | screen-resolution-extra | 0.17.1.1~14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | screen-resolution-extra | 0.17.1.1~16.04.1 |
Vulnerabilities 1
-
Unscored —
screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allow…
References
-
report
https://ubuntu.com/security/CVE-2018-8885