logo
DATABASE RESOURCES PRICING ABOUT US

OracleVM 3.4 : polkit (OVMSA-2022-0006)

2022-02-17T00:00:00

Description

The remote OracleVM system is missing necessary patches to address security updates: - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. (CVE-2021-4034) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.


Related


redhat
unix

(RHSA-2022:0269) Important: polkit security update

2022-01-25T17:49:01
redhat
unix

(RHSA-2022:0270) Important: polkit security update

2022-01-25T18:00:09
redhat
unix

(RHSA-2022:0265) Important: polkit security update

2022-01-25T17:32:45
redhat
unix

(RHSA-2022:0267) Important: polkit security update

2022-01-25T17:38:41
redhat
unix

(RHSA-2022:0271) Important: polkit security update

2022-01-25T18:04:21
redhat
unix

(RHSA-2022:0273) Important: polkit security update

2022-01-25T18:24:03
redhat
unix

(RHSA-2022:0266) Important: polkit security update

2022-01-25T17:35:29
redhat
unix

(RHSA-2022:0268) Important: polkit security update

2022-01-25T17:41:27
cloudlinux
unix

Fix of CVE: CVE-2021-4034

2022-01-26T15:45:42
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2021-12-29T15:00:00
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T06:33:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:06:45
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T20:32:10
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:04:22
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T16:28:56
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-08T00:09:31
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T14:51:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-14T22:09:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T18:31:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-20T17:49:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T23:36:36
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T23:36:36
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-30T03:08:51
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T11:37:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-05-03T09:36:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-23T11:08:20
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T15:13:28
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T19:36:38
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-23T11:08:20
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-15T02:34:48
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-21T16:54:38
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:06:45
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T19:59:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-07T12:48:35
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-30T10:34:28
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T10:26:46
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-06T19:42:59
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-20T19:44:03
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T18:12:54
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T00:05:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-08T02:57:12
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:11:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-01T19:51:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-09T08:44:02
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T22:28:52
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-19T08:46:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T06:33:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-17T13:17:07
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-10T01:24:14
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T19:37:54
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T15:07:50
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T20:24:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T09:03:34
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T18:31:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T06:54:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T20:24:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T15:16:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-12T06:20:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-03T18:29:11
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T01:09:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T04:58:16
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T08:05:54
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T01:34:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T06:00:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T05:42:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T05:44:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T02:21:08
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T03:33:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T04:05:50
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T03:20:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T11:02:29
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:39:27
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-08T20:12:38
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T14:59:37
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-04T03:47:53
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T14:43:57
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T13:45:17
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T08:43:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-05-21T05:42:01
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T13:34:01
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T18:53:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T17:49:58
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:11:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:04:37
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T17:53:16
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:43:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T19:46:19
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T19:04:55
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:22:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:58:23
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T14:40:27
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T15:56:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:18:10
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T12:44:22
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-09T02:04:07
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:05:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-08T17:55:53
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:36:35
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T09:46:35
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T23:46:28
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T20:52:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T14:26:10
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-11T04:06:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T17:07:26
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T18:01:26
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T00:56:36
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-29T01:06:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:38:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T07:19:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T14:04:58
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-01T12:11:19
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-13T20:24:59
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T09:42:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T03:19:57
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T08:14:55
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-02T05:31:42
almalinux
unix

Important: polkit security update

2022-01-25T17:38:41
schneier
blog

Twelve-Year-Old Linux Vulnerability Discovered and Patched

2022-01-31T12:18:55
saint
exploit

Polkit pkexec privilege elevation

2022-01-27T00:00:00
saint
exploit

Polkit pkexec privilege elevation

2022-01-27T00:00:00
oraclelinux
unix

polkit security update

2022-01-25T00:00:00
oraclelinux
unix

polkit security update

2022-01-28T00:00:00
oraclelinux
unix

polkit security update

2022-01-25T00:00:00
amazon
unix

Important: polkit

2022-01-27T00:38:00
hp
software

HP ThinPro Linux Escalation of Privilege

2022-03-03T00:00:00
alpinelinux
unix

CVE-2021-4034

2022-01-28T20:15:00
slackware
unix

[slackware-security] polkit

2022-01-26T05:02:16
gentoo
unix

Polkit: Local privilege escalation

2022-01-27T00:00:00
freebsd
unix

polkit -- Local Privilege Escalation

2022-01-25T00:00:00
ubuntucve
info

CVE-2021-4034

2022-01-25T00:00:00
veracode
software

Privilege Escalation

2022-01-26T05:22:38
fedora
unix

[SECURITY] Fedora 35 Update: polkit-0.120-1.fc35.1

2022-01-26T18:41:50
fedora
unix

[SECURITY] Fedora 34 Update: polkit-0.117-3.fc34.2

2022-01-26T23:42:37
ics
info

Siemens SCALANCE LPE 4903 and SINUMERIK Edge

2022-06-16T00:00:00
suse
unix

Security update for polkit (important)

2022-01-25T00:00:00
redhatcve
info

CVE-2021-4034

2022-05-07T14:22:00
kitploit
tools

PwnKit-Exploit - Proof Of Concept (PoC) CVE-2021-4034

2022-03-07T11:30:00
ubuntu
unix

PolicyKit vulnerability

2022-01-25T00:00:00
ubuntu
unix

PolicyKit vulnerability

2022-01-25T00:00:00
metasploit
exploit

Local Privilege Escalation in polkits pkexec

2022-01-26T19:05:36
mageia
unix

Updated polkit packages fix security vulnerability

2022-01-26T10:30:04
debiancve
info

CVE-2021-4034

2022-01-28T20:15:00
zdt
exploit

Polkit pkexec Local Privilege Escalation Exploit

2022-01-26T00:00:00
zdt
exploit

PolicyKit-1 0.105-31 - Privilege Escalation Exploit

2022-01-27T00:00:00
zdt
exploit

Polkit pkexec Local Privilege Escalation Vulnerability

2022-01-26T00:00:00
threatpost
info

Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’

2022-01-26T17:52:49
trendmicroblog
blog

Detecting PwnKit (CVE-2021-4034) Using Trend Micro™ Vision One™ and Cloud One™

2022-02-11T00:00:00
altlinux
unix

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.110-alt1

2022-04-12T00:00:00
f5
software

Polkit pkexec vulnerability CVE-2021-4034

2022-01-29T00:36:00
packetstorm
exploit

Polkit pkexec Local Privilege Escalation

2022-03-03T00:00:00
packetstorm
exploit

PolicyKit-1 0.105-31 Privilege Escalation

2022-01-27T00:00:00
debian
unix

[SECURITY] [DLA 2899-1] policykit-1 security update

2022-01-25T17:55:51
debian
unix

[SECURITY] [DSA 5059-1] policykit-1 security update

2022-01-25T17:46:09
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0270)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0271)

2022-01-26T00:00:00
nessus
scanner

Scientific Linux Security Update : polkit on SL7.x i686/x86_64 (2022:0274)

2022-01-26T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2022:0190-1)

2022-01-26T00:00:00
nessus
scanner

Fedora 35 : polkit (2022-da040e6b94)

2022-01-27T00:00:00
nessus
scanner

Debian DLA-2899-1 : policykit-1 - LTS security update

2022-01-31T00:00:00
nessus
scanner

Rocky Linux 8 : polkit (RLSA-2022:267)

2022-02-09T00:00:00
nessus
scanner

Ubuntu 16.04 LTS : PolicyKit vulnerability (USN-5252-2)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0267)

2022-01-26T00:00:00
nessus
scanner

SUSE SLED12 / SLES12 Security Update : polkit (SUSE-SU-2022:0189-1)

2022-01-26T00:00:00
nessus
scanner

Oracle Linux 6 : polkit (ELSA-2022-9073)

2022-01-28T00:00:00
nessus
scanner

Ubuntu 18.04 LTS / 20.04 LTS / 21.10 : PolicyKit vulnerability (USN-5252-1)

2022-01-26T00:00:00
nessus
scanner

CentOS 7 : polkit (CESA-2022:0274)

2022-01-26T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1420)

2022-04-18T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : polkit (EulerOS-SA-2022-1365)

2022-03-29T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : polkit (EulerOS-SA-2022-1512)

2022-04-20T00:00:00
nessus
scanner

EulerOS 2.0 SP8 : polkit (EulerOS-SA-2022-1359)

2022-03-28T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1419)

2022-04-18T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : polkit (EulerOS-SA-2022-1493)

2022-04-20T00:00:00
nessus
scanner

EulerOS Virtualization 3.0.2.0 : polkit (EulerOS-SA-2022-1698)

2022-05-07T00:00:00
nessus
scanner

AlmaLinux 8 : polkit (ALSA-2022:0267)

2022-03-11T00:00:00
nessus
scanner

EulerOS 2.0 SP5 : polkit (EulerOS-SA-2022-1335)

2022-03-21T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0272)

2022-01-26T00:00:00
nessus
scanner

Slackware Linux 14.0 / 14.1 / 14.2 / current polkit Vulnerability (SSA:2022-025-02)

2022-01-26T00:00:00
nessus
scanner

Debian DSA-5059-1 : policykit-1 - security update

2022-01-31T00:00:00
nessus
scanner

FreeBSD : polkit -- Local Privilege Escalation (0f8bf913-7efa-11ec-8c04-2cf05d620ecc)

2022-01-31T00:00:00
nessus
scanner

Oracle Linux 8 : polkit (ELSA-2022-0267)

2022-01-26T00:00:00
nessus
scanner

Oracle Linux 7 : polkit (ELSA-2022-0274)

2022-01-26T00:00:00
nessus
scanner

RHEL 6 : polkit (RHSA-2022:0269)

2022-01-26T00:00:00
nessus
scanner

NewStart CGSL MAIN 6.02 : polkit Vulnerability (NS-SA-2022-0073)

2022-05-09T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0274)

2022-01-26T00:00:00
nessus
scanner

SUSE SLES15 Security Update : polkit (SUSE-SU-2022:0191-1)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0268)

2022-01-26T00:00:00
nessus
scanner

openSUSE 15 Security Update : polkit (openSUSE-SU-2022:0190-1)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0266)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0273)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0265)

2022-01-26T00:00:00
nessus
scanner

GLSA-202201-01 : Polkit: Local privilege escalation

2022-01-27T00:00:00
rocky
unix

polkit security update

2022-01-26T21:26:22
attackerkb
info

CVE-2021-4034

2022-03-03T00:00:00
ibm
software

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

2022-01-31T17:54:39
ibm
software

Security Bulletin: Vulnerability in Polkit affects IBM Integrated Analytics System.

2022-02-16T05:38:50
ibm
software

Security Bulletin: Vulnerability in Polkit affects IBM Cloud Pak for Data System 1.0

2022-02-16T14:19:29
ibm
software

Security Bulletin: IBM Security Guardium is affected by a PolicyKit vulnerability (CVE-2021-4034)

2022-05-12T17:54:36
qualysblog
blog

PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034)

2022-01-25T17:36:43
centos
unix

polkit security update

2022-01-26T20:42:52