Lucene search
RedHatRHSA-2022:0266HistoryJan 25, 2022 - 5:35 p.m.
(RHSA-2022:0266) Important: polkit security update
2022-01-2517:35:29
access.redhat.com
52
polkit
security update
privilege escalation
cve-2021-4034
cvss score
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.9%
The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.
Security Fix(es):
- polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | polkit-devel | < 0.115-11.el8_4.2 | polkit-devel-0.115-11.el8_4.2.x86_64.rpm |
| RedHat | 8 | x86_64 | polkit-debuginfo | < 0.115-11.el8_4.2 | polkit-debuginfo-0.115-11.el8_4.2.x86_64.rpm |
| RedHat | 8 | s390x | polkit-libs | < 0.115-11.el8_4.2 | polkit-libs-0.115-11.el8_4.2.s390x.rpm |
| RedHat | 8 | i686 | polkit-debuginfo | < 0.115-11.el8_4.2 | polkit-debuginfo-0.115-11.el8_4.2.i686.rpm |
| RedHat | 8 | ppc64le | polkit-libs | < 0.115-11.el8_4.2 | polkit-libs-0.115-11.el8_4.2.ppc64le.rpm |
| RedHat | 8 | s390x | polkit-debuginfo | < 0.115-11.el8_4.2 | polkit-debuginfo-0.115-11.el8_4.2.s390x.rpm |
| RedHat | 8 | ppc64le | polkit | < 0.115-11.el8_4.2 | polkit-0.115-11.el8_4.2.ppc64le.rpm |
| RedHat | 8 | s390x | polkit-libs-debuginfo | < 0.115-11.el8_4.2 | polkit-libs-debuginfo-0.115-11.el8_4.2.s390x.rpm |
| RedHat | 8 | x86_64 | polkit | < 0.115-11.el8_4.2 | polkit-0.115-11.el8_4.2.x86_64.rpm |
| RedHat | 8 | aarch64 | polkit-debuginfo | < 0.115-11.el8_4.2 | polkit-debuginfo-0.115-11.el8_4.2.aarch64.rpm |
Related
rosalinux
rosalinux
Advisory ROSA-SA-2022-2013
2022-01-31 14:03:39
Advisory ROSA-SA-2022-2012
2022-01-27 13:18:29
githubexploit
githubexploit
Exploit for Out-of-bounds Read in Polkit Project Polkit
2022-03-23 11:08:20
Exploit for Out-of-bounds Read in Polkit Project Polkit
2022-05-21 05:42:01
Exploit for Out-of-bounds Write in Polkit Project Polkit
2022-09-25 02:46:20
ibm
ibm
saint
saint
Polkit pkexec privilege elevation
2022-01-27 00:00:00
Polkit pkexec privilege elevation
2022-01-27 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1420)
2022-04-18 00:00:00
openSUSE 15 Security Update : polkit (openSUSE-SU-2022:0190-1)
2022-01-26 00:00:00
RHEL 8 : polkit (RHSA-2022:0266)
2022-01-26 00:00:00
prion
prion
Privilege escalation
2022-01-28 20:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2022-2527)
2022-10-10 00:00:00
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2023-1083)
2023-01-09 00:00:00
openSUSE: Security Advisory for polkit (openSUSE-SU-2022:0190-1)
2022-02-08 00:00:00
freebsd
freebsd
polkit -- Local Privilege Escalation
2022-01-25 00:00:00
qualysblog
qualysblog
QSC 2022: Qualys’ Threat Research Unit (TRU) – Our Shield Is Your Shield
2022-11-11 01:28:25
fedora
fedora
[SECURITY] Fedora 34 Update: polkit-0.117-3.fc34.2
2022-01-26 23:42:37
slackware
slackware
[slackware-security] polkit
2022-01-26 05:02:16
thn
thn
redos
redos
ROS-20220128-01
2022-01-28 00:00:00
checkpoint_security
checkpoint_security
veracode
veracode
Privilege Escalation
2022-01-26 05:22:38
ubuntu
ubuntu
PolicyKit vulnerability
2022-01-25 00:00:00
PolicyKit vulnerability
2022-01-25 00:00:00
debiancve
debiancve
CVE-2021-4034
2022-01-28 20:15:12
redhat
redhat
(RHSA-2022:0267) Important: polkit security update
2022-01-25 17:38:41
(RHSA-2022:0272) Important: polkit security update
2022-01-25 18:08:44
(RHSA-2022:0269) Important: polkit security update
2022-01-25 17:49:01
metasploit
metasploit
Local Privilege Escalation in polkits pkexec
2022-01-26 19:05:36
talosblog
talosblog
Alchimist: A new attack framework in Chinese for Mac, Linux and Windows
2022-10-13 12:00:00
osv
osv
Important: polkit security update
2022-01-25 17:38:41
policykit-1 - security update
2022-01-25 00:00:00
libpolkit-agent-1-0-0.120-2.1 on GA media
2024-06-15 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-4034 affecting package polkit for versions less than 0.119-2
2022-04-09 06:51:57
CVE-2021-4034 affecting package polkit 0.116-7
2022-02-01 04:53:56
cisa_kev
cisa_kev
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
2022-06-27 00:00:00
attackerkb
attackerkb
CVE-2021-4034
2022-01-28 00:00:00
packetstorm
packetstorm
Polkit pkexec Local Privilege Escalation
2022-03-03 00:00:00
f5
f5
K46015513 : Polkit pkexec vulnerability CVE-2021-4034
2022-01-29 00:00:00
threatpost
threatpost
Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’
2022-01-26 17:52:49
trendmicroblog
trendmicroblog
zdt
zdt
PolicyKit-1 0.105-31 - Privilege Escalation Exploit
2022-01-27 00:00:00
Polkit pkexec Local Privilege Escalation Exploit
2022-01-26 00:00:00
kitploit
kitploit
PwnKit-Exploit - Proof Of Concept (PoC) CVE-2021-4034
2022-03-07 11:30:00
rocky
rocky
polkit security update
2022-01-26 21:26:22
suse
suse
Security update for polkit (important)
2022-01-25 00:00:00
ics
ics
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
2022-06-16 12:00:00
redhatcve
redhatcve
CVE-2021-4034
2022-05-07 14:22:00
nvd
nvd
CVE-2021-4034
2022-01-28 20:15:12
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4034
2022-01-26 15:45:42
exploitdb
exploitdb
PolicyKit-1 0.105-31 - Privilege Escalation
2022-01-27 00:00:00
oraclelinux
oraclelinux
polkit security update
2022-01-25 00:00:00
cve
cve
CVE-2021-4034
2022-01-28 20:15:12
gentoo
gentoo
Polkit: Local privilege escalation
2022-01-27 00:00:00
mageia
mageia
Updated polkit packages fix security vulnerability
2022-01-26 13:30:04
alpinelinux
alpinelinux
CVE-2021-4034
2022-01-28 20:15:12
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.9%
Related for RHSA-2022:0266