1919 matches found
CLSA-2022-1644927474 Fix of CVE: CVE-2021-4115
CVE-2021-4115: file decriptor leak due to incorrect handling of async streams in src/polkit/polkitsystembusname.c...
CLSA-2022-1644927378 Fix of CVE: CVE-2021-4115
CVE-2021-4115: file decriptor leak due to incorrect handling of async streams in src/polkit/polkitsystembusname.c...
Important: Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.10-1]
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...
RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.10-1] (Important) (RHSA-2022:0540)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0540 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...
CVE-2021-4115
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being...
CVE-2021-4115
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being...
UBUNTU-CVE-2021-4115
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being...
polkit 安全漏洞
polkit is a component for controlling system-wide permissions in Unix-like operating systems. It enables communication between processes of different priority by defining and auditing permission rules. A resource management error vulnerability exists in polkit, which stems from process file...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
This repository is a proof-of-concept PoC exploit for CVE-2021-4034, a vulnerability in the polkit privilege escalation exploit. The exploit is implemented in C and uses the execve system call to execute a shell with elevated privileges. The vulnerability is related to the way polkit handles user...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 A simple PWNKIT file to convert you to root. | O...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560-Polkit-DBus Simple proof of concenpt script for...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
pwncatpwnkit !asciicasthttps://asciinema.org/a/n3DRuvT0hr...
EulerOS Virtualization 3.0.6.0 : polkit (EulerOS-SA-2022-1090)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of th...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2022-1090)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 polkit privilege escalation exploit Just ex...
AlmaLinux 8 : systemd (ALSA-2021:1611)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1611 advisory. - In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possib...
AlmaLinux 8 : polkit (ALSA-2021:2238)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2238 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network...
Rocky Linux 8 : polkit (RLSA-2021:2238)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2238 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Netwo...