CVE-2021-4034

A local privilege escalation vulnerability was found on polkit’s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn’t handle the calling parameters coun...

CVE-2021-4034

Polkit pkexec (setuid) contains a local privilege escalation flaw where pkexec fails to validate the calling parameter count and may treat crafted environment variables as commands, enabling unprivileged users to execute arbitrary code with root privileges. This has been reported across multiple ...

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

Amazon Linux 2 : polkit (ALAS-2022-1745)

The version of polkit installed on the remote host is prior to 0.112-26. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1745 advisory. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed t...

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Podman_Project Podman

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Local privilege escalation via pkexec You...

CLSA-2022-1643291562 Fix of CVE: CVE-2021-4034

CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...

Advisory ROSA-SA-2022-2012

Software: polkit 0.112 OS: rosa-server79 packageevrstring: polkit-0.112-26 CVE-ID: CVE-2021-4034 BDU-ID: 2022-00488 CVE-Crit: HIGH CVE-DESC: There is an issue in pkexec that causes it to not check the number of arguments, assuming that it will always be at least 1 and that the second value is equ...

OESA-2022-1502 polkit security update

Define and Handle authorizations tool. Security Fixes: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current versi...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 This is a POC for the vulnerability...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 A simple proof-of-concept for CVE-2021-4034 pke...

polkit pkexec elevation of privilege vulnerability

pkexec is a SUID root program that is installed on every major Linux distribution by default. polkit pkexec elevation of privilege vulnerability can be exploited to gain full root privileges on a host...

Polkit pkexec privilege elevation

Added: 01/27/2022 CVE: CVE-2021-4034 Background Polkit is a Linux package for handling policies that allow unprivileged processes to communicate with privileged processes. It includes a tool called pkexec that allows the user to execute commands as another user according to the polkit policy...

Important: polkit

Issue Overview: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling...

GLSA-202201-01 : Polkit: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-202201-01 Polkit: Local privilege escalation - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as...

Fedora 35 : polkit (2022-da040e6b94)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-da040e6b94 advisory. pkexec: argv overflow results in local privilege esc. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Polkit: Local privilege escalation

Background polkit is a toolkit for managing policies related to unprivileged processes communicating with privileged process. Description Flawed input validation of arguments was discovered in the 'pkexec' program's main function. Impact A local attacker could achieve root privilege escalation...