Lucene search
+L

10497 matches found

Vulnrichment
Vulnrichment
•added 2022/01/28 12:00 a.m.•35 views

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.5AI score0.94921EPSS
SaveExploits159References11
attackerkb
attackerkb
•added 2022/01/28 12:00 a.m.•103 views

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit’s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn’t handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveIn wildExploits159References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•6 views

CVE-2021-4034: Out-of-bounds Write

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References26
Mend
Mend
•added 2022/01/28 12:00 a.m.•6 views

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

8.5CVSS0.94921EPSS
SaveExploits159References15
AlpineLinux
AlpineLinux
•added 2022/01/28 12:00 a.m.•88 views

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•47 views

Mageia: Security Advisory (MGASA-2014-0393)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.1AI score0.9994EPSS
SaveExploits31References6
osv_oesa
osv_oesa
•added 2022/01/27 11:04 a.m.•21 views

OESA-2022-1502 polkit security update

Define and Handle authorizations tool. Security Fixes: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current versi...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References2
RedHat Linux
RedHat Linux
•added 2022/01/25 8:10 p.m.•13 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 7:47 p.m.•13 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 7:07 p.m.•15 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:44 p.m.•15 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:30 p.m.•11 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:21 p.m.•13 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:21 p.m.•12 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:15 p.m.•10 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:04 p.m.•13 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
RedHat Linux
RedHat Linux
•added 2022/01/25 6:04 p.m.•18 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References7
UbuntuCve
UbuntuCve
•added 2022/01/25 5:00 p.m.•155 views

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References5
osv_ubuntu
osv_ubuntu
•added 2022/01/25 5:00 p.m.•16 views

UBUNTU-CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits159References6
Metasploit
Metasploit
•added 2022/01/25 12:00 a.m.•1205 views

Local Privilege Escalation in polkits pkexec

A bug exists in the polkit pkexec binary in how it processes arguments. If the binary is provided with no arguments, it will continue to process environment variables as argument variables, but without any security checking. By using the execve call we can specify a null argument list and populat...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits159
Rows per page
Query Builder