Ubuntu: Security Advisory (USN-4980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 2.0: Polkit PHSA-2021-2.0-0350

An update of the polkit package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0350. The text itself is copyright C VMware, Inc...

Photon OS 4.0: Polkit PHSA-2021-4.0-0037

An update of the polkit package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0037. The text itself is copyright C VMware, Inc...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2021:1843-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

Photon OS 3.0: Polkit PHSA-2021-3.0-0248

An update of the polkit package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0248. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

RHEL 8 : polkit (RHSA-2021:2238)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2238 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

SUSE SLES12 Security Update : polkit (SUSE-SU-2021:1842-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

polkit security update

0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560...

Oracle Linux 8 : polkit (ELSA-2021-2238)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2238 advisory. 0.115-11.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-11.1 - early disconnection from D-Bus results in privilege esc. - Resolves:...

SUSE SLES15 Security Update : polkit (SUSE-SU-2021:1844-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE-SU-2021:1843-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497...

SUSE-SU-2021:1842-1 Security update for polkit

This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497...

Important: Red Hat Security Advisory: polkit security update

An update for polkit is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: polkit security update

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fixes: polkit: local privilege escalation using polkitsystembusnamegetcredssync...

polkit security update

An update is available for polkit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The polkit packages provide a component for controlling system-wide privileges...

CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...

Ubuntu 20.04 LTS : polkit vulnerability (USN-4980-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4980-1 advisory. Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue ...

RHEL 8 : polkit (RHSA-2021:2237)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2237 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

CVE-2020-3560

Cisco Aironet Access Points are affected by CVE-2020-3560 due to improper resource management when processing certain UDP packets. An unauthenticated, remote attacker could leverage crafted UDP traffic to a specific port to cause a DoS, either by tearing down the AP–WLC connection or by forcing t...

RHEL 6 : chromium-browser (RHSA-2020:3560)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3560 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 84.0.4147.135. Security Fixes:...