CVE:CVE-2019-6133
CNNVD:CNNVD-201901-375
Red Hat PolicyKit（Polkit）是美国红帽（Red Hat）公司的一个用于在Unix兼容系统中对应用程序进行权限控制的工具。该工具为现代桌面提供了一个中央框架用于授权一般应用程序进行特权工作。
Red Hat PolicyKit 0.115版本中存在竞争条件问题漏洞。该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。
solution:Upgrade polkit_project polkit to a higher version than 0.115,and avoid the version 0.115; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,6.6,and avoid the version 7.6,6.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10