VULNERABILITY INTELLIGENCE

CVE-2008-1658

CVSS score4.6 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2008-04-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in a password.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references