1919 matches found
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Introduction This is an exploit for the CVE...
SUSE: Security Advisory (SUSE-SU-2022:4639-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : polkit-default-privs (SUSE-SU-2022:4639-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4639-1 advisory. Update to version 13.2+20221216.a0c29e6: - backport usbguard actions bsc1206414. Tenable has extracted th...
SUSE-SU-2022:4639-1 Security update for polkit-default-privs
This update for polkit-default-privs fixes the following issues: Update to version 13.2+20221216.a0c29e6: - backport usbguard actions bsc1206414...
PT-2022-37541 · Unknown · Polkit-Default-Privs
Name of the Vulnerable Software and Affected Versions: polkit-default-privs versions prior to 13.2+20221216.a0c29e6 Description: The issue is related to the polkit-default-privs package, where an update to version 13.2+20221216.a0c29e6 includes backporting usbguard actions. Recommendations: Updat...
Amazon Linux 2022 : polkit (ALAS2022-2022-220)
The version of polkit installed on the remote host is prior to 0.117-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-220 advisory. - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid to...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 One day for the polkit privilege escalation expl...
NewStart CGSL MAIN 6.02 : polkit Vulnerability (NS-SA-2022-0094)
The remote NewStart CGSL host, running version MAIN 6.02, has polkit packages installed that are affected by a vulnerability: - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run...
Alchimist: A new attack framework in Chinese for Mac, Linux and Windows
Contributions from Matt Thaxton. Cisco Talos discovered a new attack framework including a command and control C2 tool called "Alchimist" and a new malware "Insekt" with remote administration capabilities. The Alchimist has a web interface in Simplified Chinese with remote administration features...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2022-2583)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Local pri...
EulerOS Virtualization 3.0.6.0 : polkit (EulerOS-SA-2022-2583)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2022-2527)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.6 : polkit (EulerOS-SA-2022-2527)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed...
RHEL 8 : polkit (RHSA-2021:2236)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2236 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...
Amazon Linux 2022 : polkit, polkit-devel, polkit-libs (ALAS2022-2022-102)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-102 advisory. There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion.The highest threat from this vulnerability is to availability. NOTE:...
Amazon Linux 2022 : polkit, polkit-devel, polkit-libs (ALAS2022-2022-097)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-097 advisory. There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion.The highest threat from this vulnerability is to availability. NOTE:...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.30281)
The version of AHV installed on the remote host is prior to 20201105.30281. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.30281 advisory. - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSER...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.2267)
The version of AHV installed on the remote host is prior to 20201105.2267. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.2267 advisory. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when...