12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems, even as a proof-of-concept PoC exploit has emerged in the wild merely hours after technical details of the bug became public. Dubbed "PwnKit" by...

[slackware-security] polkit

New polkit packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/polkit-0.113-i586-4slack14.2.txz: Rebuilt. PATCH pkexec: local privilege escalation. Thanks to Qualys Research Labs for...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 January 25, 2022 | An00bRektn This is a golan...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 self contained...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Exploit for the pwnkit vulnerabilityhttps://...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Proof of Concept ============================== Q...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

poc-cve-2021-4034 PoC for CVE-2021-4034 dubbed pwnkit !Rele...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...

Critical Photon OS Security Update - PHSA-2022-0356

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'polkit', 'glibc', 'openssh', 'linux-rt', 'linux', 'vim' packages of Photon OS have been released...

RHEL 8 : polkit (RHSA-2022:0265)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0265 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 8 : polkit (RHSA-2022:0266)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0266 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 8 : polkit (RHSA-2022:0268)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0268 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 7 : polkit (RHSA-2022:0271)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0271 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 7 : polkit (RHSA-2022:0272)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0272 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 7 : polkit (RHSA-2022:0273)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0273 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 7 : polkit (RHSA-2022:0274)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0274 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

Slackware Linux 14.0 / 14.1 / 14.2 / current polkit Vulnerability (SSA:2022-025-02)

The version of polkit installed on the remote host is prior to 0.105 / 0.113 / 0.120. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-025-02 advisory. - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid...

Scientific Linux Security Update : polkit on SL7.x i686/x86_64 (2022:0274)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:0274-1 advisory. - polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector CVE-2021-4034 Note that Nessus has not tested for this issue b...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2022:0190-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0190-1 advisory. - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...

RHEL 8 : polkit (RHSA-2022:0267)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0267 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...