341 matches found
SUSE-SU-2022:0190-1 Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec bsc1194568...
Important: Red Hat Security Advisory: polkit security update
An update for polkit is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
[SECURITY] [DLA 2899-1] policykit-1 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2899-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso January 25, 2022 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5059-1] policykit-1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5059-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2022 https://www.debian.org/security/faq -...
ALSA-2022:0267 Important: polkit security update
The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fixes: polkit: Local privilege escalation in pkexec due to incorrect handling of argument...
polkit security update
An update is available for polkit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The polkit packages provide a component for controlling system-wide privileges...
PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034)
The Qualys Research Team has discovered a memory corruption vulnerability in polkits pkexec, a SUID-root program that is installed by default on every major Linux distribution. This easily exploited vulnerability allows any unprivileged user to gain full root privileges on a vulnerable host by...
CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...
polkit security update
0.112-26.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.112-26.1 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034...
Security update for polkit (important)
openSUSE Security Update: Security update for polkit Announcement ID: openSUSE-SU-2022:0190-1 Rating: important References: 1194568 Cross-References: CVE-2021-4034 Affected Products: openSUSE Leap 15.3 An update that fixes one vulnerability is now available. Description: This update for polkit...
RHEL 7 : binutils (RHSA-2021:4034)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4034 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...
Ubuntu 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-4034-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4034-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were...
Ubuntu: Security Advisory (USN-4034-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4034
IBM Content Navigator CVE-2019-4034 affects the 3.0 Continuous Delivery line. A vulnerability allows code execution on a user’s workstation when editing an executable file in ICN with the Edit service. Root cause involves input handling that leads to execution on the client. Remediation per IBM b...
CVE-2019-4034
IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's workstation. IBM X-Force ID: 156000...
CVE-2018-4034
CVE-2018-4034 affects CleanMyMac X 4.04. The vulnerability resides in the removeItemAtPath function of the helper protocol, where a user-supplied argument is passed to a privileged root-level operation without validation. This allows a local attacker to run the function as root and delete files f...
CVE-2011-4034
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/teechartpro.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2017-4034
This CVE-2017-4034 entry is rejected and not an active vulnerability entry.
CVE-2017-4034
...
CVE-2008-4034
...