logo
DATABASE RESOURCES PRICING ABOUT US

12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

2022-01-26T05:39:00

Description

[![](https://thehackernews.com/new-images/img/a/AVvXsEhI97Ku4vg4Jm_CGDvqtOuK_CPe3ndwAvsWS1laMg7it8hFSVmooGbTIBB-VyzaXv2X-jJ9DJKmHvzWRfu5IHYSqrmxP3PRqh1et84PzAFwrVjrmoJI9gmzgwDInqw1mm_idVrZpVFtMBLpwXlE4ZlWnmOhvXoPsp7JbnyYqziUoHjqiTv6Yrl6lcUH)](<https://thehackernews.com/new-images/img/a/AVvXsEhI97Ku4vg4Jm_CGDvqtOuK_CPe3ndwAvsWS1laMg7it8hFSVmooGbTIBB-VyzaXv2X-jJ9DJKmHvzWRfu5IHYSqrmxP3PRqh1et84PzAFwrVjrmoJI9gmzgwDInqw1mm_idVrZpVFtMBLpwXlE4ZlWnmOhvXoPsp7JbnyYqziUoHjqiTv6Yrl6lcUH>) A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems, even as a proof-of-concept (PoC) exploit has emerged in the wild merely hours after technical details of the bug became public. Dubbed "PwnKit" by cybersecurity firm Qualys, the weakness impacts a component in polkit called pkexec, a program that's installed by default on every major Linux distribution such as Ubunti, Debian, Fedora, and CentOS. [Polkit](<https://en.wikipedia.org/wiki/Polkit>) (formerly called **PolicyKit**) is a toolkit for controlling system-wide privileges in Unix-like operating systems, and provides a mechanism for non-privileged processes to communicate with privileged processes. "This vulnerability allows any unprivileged user to gain full root privileges on a vulnerable host by exploiting this vulnerability in its default configuration," Bharat Jogi, director of vulnerability and threat research at Qualys, [said](<https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034>), adding it "has been hiding in plain sight for 12+ years and affects all versions of pkexec since its first version in May 2009." The flaw, which concerns a case of memory corruption and has been assigned the identifier CVE-2021-4034, was reported to Linux vendors on November 18, 2021, following which patches have been issued by [Debian](<https://security-tracker.debian.org/tracker/CVE-2021-4034>), [Red Hat](<https://access.redhat.com/security/vulnerabilities/RHSB-2022-001>), and [Ubuntu](<https://ubuntu.com/security/CVE-2021-4034>). [pkexec](<https://linux.die.net/man/1/pkexec>), analogous to the [sudo](<https://linux.die.net/man/8/sudo>) command, allows an authorized user to execute commands as another user, doubling as an alternative to sudo. If no username is specified, the command to be executed will be run as the administrative super user, root. PwnKit stems from an out-of-bounds write that enables the reintroduction of "unsecure" environment variables into pkexec's environment. While this vulnerability is not remotely exploitable, an attacker that has already established a foothold on a system via another means can weaponize the flaw to achieve full root privileges. Complicating matters is the emergence of a PoC in the wild, which CERT/CC vulnerability analyst Will Dormann [called](<https://twitter.com/wdormann/status/1486106541665226753>) "simple and universal," making it absolutely vital that the patches are applied as soon as possible to contain potential threats. The development marks the second security flaw uncovered in Polkit in as many years. In June 2021, GitHub security researcher Kevin Backhouse revealed details of a seven-year-old privilege escalation vulnerability ([CVE-2021-3560](<https://thehackernews.com/2021/06/7-year-old-polkit-flaw-lets.html>)) that could be abused to escalate permissions to the root user. On top of that, the disclosure also arrives close on the heels of a security flaw affecting the Linux kernel ([CVE-2022-0185](<https://blog.aquasec.com/cve-2022-0185-linux-kernel-container-escape-in-kubernetes>)) that could be exploited by an attacker with access to a system as an unprivileged user to escalate those rights to root and break out of containers in Kubernetes setups. Found this article interesting? Follow THN on [Facebook](<https://www.facebook.com/thehackernews>), [Twitter __](<https://twitter.com/thehackersnews>) and [LinkedIn](<https://www.linkedin.com/company/thehackernews/>) to read more exclusive content we post.


Related


githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T07:19:17
githubexploit
exploit

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

2022-02-18T09:27:34
githubexploit
exploit

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

2022-04-05T07:48:35
githubexploit
exploit

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

2022-01-27T16:24:35
githubexploit
exploit

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

2022-01-19T06:19:38
githubexploit
exploit

Exploit for Integer Overflow or Wraparound in Linux Linux Kernel

2022-01-26T16:27:50
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T20:32:10
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-20T17:49:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T14:51:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-23T11:08:20
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-21T16:54:38
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-20T19:44:03
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2021-12-29T15:00:00
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T06:33:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:06:45
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T20:24:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T02:27:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T09:42:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T08:14:55
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-04T06:33:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-12T06:20:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T19:37:54
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T16:28:56
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-08T00:09:31
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T11:37:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T04:58:16
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T01:09:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T05:42:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T05:44:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T06:00:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T15:56:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T09:46:35
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T04:05:50
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T13:34:01
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T14:59:37
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:39:27
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:36:35
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T17:07:26
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-09T02:04:07
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:05:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T13:45:17
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-11T04:06:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T18:53:47
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-09T08:44:02
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:11:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T19:46:19
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T19:04:55
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T14:40:27
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T19:59:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T14:04:58
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-08T02:57:12
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-15T02:34:48
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-29T01:06:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-17T13:17:07
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-14T22:09:44
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-08T17:55:53
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:06:45
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-16T23:05:53
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-05T19:49:52
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:04:22
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T02:21:08
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T23:36:36
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T13:38:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T04:24:20
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T12:44:22
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T20:24:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T17:43:24
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-30T03:08:51
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-29T06:54:49
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-13T00:05:32
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T10:26:46
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:11:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T07:19:21
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T18:12:54
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-23T11:08:20
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T23:36:36
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-10T01:24:14
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-02-02T05:31:42
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-04-19T08:46:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:43:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-27T14:29:55
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-28T03:19:57
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T17:49:58
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T08:43:15
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T23:46:28
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:22:43
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:18:10
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T03:20:18
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T10:58:23
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-05-03T09:36:40
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-03-03T18:29:11
githubexploit
exploit

Exploit for Out-of-bounds Write in Polkit Project Polkit

2022-01-26T16:04:37
nessus
scanner

RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.10-1] (Important) (RHSA-2022:0540)

2022-02-15T00:00:00
nessus
scanner

Ubuntu 18.04 LTS / 20.04 LTS / 21.04 / 21.10 : Linux kernel vulnerability (USN-5240-1)

2022-01-20T00:00:00
nessus
scanner

SUSE SLES15 Security Update : kernel (Live Patch 21 for SLE 15 SP2) (SUSE-SU-2022:0239-1)

2022-02-01T00:00:00
nessus
scanner

SUSE SLES15 Security Update : kernel (Live Patch 9 for SLE 15 SP3) (SUSE-SU-2022:0262-1)

2022-02-01T00:00:00
nessus
scanner

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9028)

2022-01-19T00:00:00
nessus
scanner

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9029)

2022-01-19T00:00:00
nessus
scanner

CentOS 8 : polkit (CESA-2022:0267)

2022-01-27T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0265)

2022-01-26T00:00:00
nessus
scanner

Oracle Linux 7 : polkit (ELSA-2022-0274)

2022-01-26T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1419)

2022-04-18T00:00:00
nessus
scanner

Oracle Linux 8 : polkit (ELSA-2022-0267)

2022-01-26T00:00:00
nessus
scanner

SUSE SLED12 / SLES12 Security Update : polkit (SUSE-SU-2022:0189-1)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0266)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0273)

2022-01-26T00:00:00
nessus
scanner

GLSA-202201-01 : Polkit: Local privilege escalation

2022-01-27T00:00:00
nessus
scanner

Ubuntu 16.04 LTS : PolicyKit vulnerability (USN-5252-2)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0267)

2022-01-26T00:00:00
nessus
scanner

Oracle Linux 6 : polkit (ELSA-2022-9073)

2022-01-28T00:00:00
nessus
scanner

Ubuntu 18.04 LTS / 20.04 LTS / 21.10 : PolicyKit vulnerability (USN-5252-1)

2022-01-26T00:00:00
nessus
scanner

Scientific Linux Security Update : polkit on SL7.x i686/x86_64 (2022:0274)

2022-01-26T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2022:0190-1)

2022-01-26T00:00:00
nessus
scanner

Fedora 35 : polkit (2022-da040e6b94)

2022-01-27T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0274)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0270)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0271)

2022-01-26T00:00:00
nessus
scanner

SUSE SLES15 Security Update : polkit (SUSE-SU-2022:0191-1)

2022-01-26T00:00:00
nessus
scanner

RHEL 8 : polkit (RHSA-2022:0268)

2022-01-26T00:00:00
nessus
scanner

openSUSE 15 Security Update : polkit (openSUSE-SU-2022:0190-1)

2022-01-26T00:00:00
nessus
scanner

RHEL 7 : polkit (RHSA-2022:0272)

2022-01-26T00:00:00
nessus
scanner

Slackware Linux 14.0 / 14.1 / 14.2 / current polkit Vulnerability (SSA:2022-025-02)

2022-01-26T00:00:00
nessus
scanner

OracleVM 3.4 : polkit (OVMSA-2022-0006)

2022-02-17T00:00:00
nessus
scanner

Debian DSA-5059-1 : policykit-1 - security update

2022-01-31T00:00:00
nessus
scanner

FreeBSD : polkit -- Local Privilege Escalation (0f8bf913-7efa-11ec-8c04-2cf05d620ecc)

2022-01-31T00:00:00
nessus
scanner

Debian DLA-2899-1 : policykit-1 - LTS security update

2022-01-31T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : polkit (EulerOS-SA-2022-1512)

2022-04-20T00:00:00
nessus
scanner

EulerOS 2.0 SP8 : polkit (EulerOS-SA-2022-1359)

2022-03-28T00:00:00
nessus
scanner

AlmaLinux 8 : polkit (ALSA-2022:0267)

2022-03-11T00:00:00
nessus
scanner

EulerOS 2.0 SP5 : polkit (EulerOS-SA-2022-1335)

2022-03-21T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : polkit (EulerOS-SA-2022-1493)

2022-04-20T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1420)

2022-04-18T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : polkit (EulerOS-SA-2022-1365)

2022-03-29T00:00:00
nessus
scanner

EulerOS Virtualization 3.0.2.0 : polkit (EulerOS-SA-2022-1698)

2022-05-07T00:00:00
nessus
scanner

NewStart CGSL MAIN 6.02 : polkit Vulnerability (NS-SA-2022-0073)

2022-05-09T00:00:00
nessus
scanner

Rocky Linux 8 : polkit (RLSA-2022:267)

2022-02-09T00:00:00
nessus
scanner

CentOS 7 : polkit (CESA-2022:0274)

2022-01-26T00:00:00
redhat
unix

(RHSA-2022:0540) Important: Red Hat Virtualization Host security update [ovirt-4.4.10-1]

2022-02-15T10:47:42
redhat
unix

(RHSA-2022:0265) Important: polkit security update

2022-01-25T17:32:45
redhat
unix

(RHSA-2022:0272) Important: polkit security update

2022-01-25T18:08:44
redhat
unix

(RHSA-2022:0274) Important: polkit security update

2022-01-25T19:09:44
redhat
unix

(RHSA-2022:0267) Important: polkit security update

2022-01-25T17:38:41
redhat
unix

(RHSA-2022:0273) Important: polkit security update

2022-01-25T18:24:03
redhat
unix

(RHSA-2022:0266) Important: polkit security update

2022-01-25T17:35:29
redhat
unix

(RHSA-2022:0271) Important: polkit security update

2022-01-25T18:04:21
ubuntucve
info

CVE-2022-0185

2022-01-18T00:00:00
fedora
unix

[SECURITY] Fedora 35 Update: kernel-5.15.16-200.fc35

2022-01-22T01:32:03
fedora
unix

[SECURITY] Fedora 34 Update: kernel-5.15.16-100.fc34

2022-01-22T01:18:36
fedora
unix

[SECURITY] Fedora 34 Update: polkit-0.117-3.fc34.2

2022-01-26T23:42:37
fedora
unix

[SECURITY] Fedora 35 Update: polkit-0.120-1.fc35.1

2022-01-26T18:41:50
mageia
unix

Updated kernel-linus packages fix security vulnerability

2022-01-21T21:41:23
mageia
unix

Updated kernel packages fix security vulnerability

2022-01-21T21:41:23
mageia
unix

Updated polkit packages fix security vulnerability

2022-01-26T10:30:04
oraclelinux
unix

Unbreakable Enterprise kernel-container security update

2022-01-19T00:00:00
oraclelinux
unix

Unbreakable Enterprise kernel security update

2022-01-19T00:00:00
oraclelinux
unix

polkit security update

2022-01-25T00:00:00
oraclelinux
unix

polkit security update

2022-01-28T00:00:00
oraclelinux
unix

polkit security update

2022-01-25T00:00:00
f5
software

Linux kernel vulnerability CVE-2022-0185

2022-03-02T17:30:00
f5
software

Polkit pkexec vulnerability CVE-2021-4034

2022-01-29T00:36:00
cloudfoundry
software

USN-5240-1: Linux kernel vulnerability | Cloud Foundry

2022-03-11T00:00:00
ubuntu
unix

Kernel Live Patch Security Notice

2022-01-20T00:00:00
ubuntu
unix

Linux kernel vulnerability

2022-01-19T00:00:00
ubuntu
unix

PolicyKit vulnerability

2022-01-25T00:00:00
ubuntu
unix

PolicyKit vulnerability

2022-01-25T00:00:00
veracode
software

Denial Of Service (DoS)

2022-01-20T05:51:17
veracode
software

Privilege Escalation

2022-01-26T05:22:38
debiancve
info

CVE-2022-0185

2022-02-11T18:15:00
debiancve
info

CVE-2021-4034

2022-01-28T20:15:00
cve
NVD

CVE-2022-0185

2022-02-11T18:15:00
redhatcve
info

CVE-2022-0185

2022-01-18T19:18:49
redhatcve
info

CVE-2021-4034

2022-05-07T14:22:00
hp
software

HP ThinPro Linux Escalation of Privilege

2022-03-03T00:00:00
alpinelinux
unix

CVE-2021-4034

2022-01-28T20:15:00
freebsd
unix

polkit -- Local Privilege Escalation

2022-01-25T00:00:00
slackware
unix

[slackware-security] polkit

2022-01-26T05:02:16
ics
info

Siemens SCALANCE LPE 4903 and SINUMERIK Edge

2022-06-16T00:00:00
metasploit
exploit

Local Privilege Escalation in polkits pkexec

2022-01-26T19:05:36
almalinux
unix

Important: polkit security update

2022-01-25T17:38:41
schneier
blog

Twelve-Year-Old Linux Vulnerability Discovered and Patched

2022-01-31T12:18:55
saint
exploit

Polkit pkexec privilege elevation

2022-01-27T00:00:00
saint
exploit

Polkit pkexec privilege elevation

2022-01-27T00:00:00
amazon
unix

Important: polkit

2022-01-27T00:38:00
altlinux
unix

Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.110-alt1

2022-04-12T00:00:00
rocky
unix

polkit security update

2022-01-26T21:26:22
ibm
software

Security Bulletin: Vulnerability in Polkit affects IBM Integrated Analytics System.

2022-02-16T05:38:50
ibm
software

Security Bulletin: Vulnerability in Polkit affects IBM Cloud Pak for Data System 1.0

2022-02-16T14:19:29
ibm
software

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

2022-01-31T17:54:39
ibm
software

Security Bulletin: IBM Security Guardium is affected by a PolicyKit vulnerability (CVE-2021-4034)

2022-05-12T17:54:36
threatpost
info

Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’

2022-01-26T17:52:49
trendmicroblog
blog

Detecting PwnKit (CVE-2021-4034) Using Trend Micro™ Vision One™ and Cloud One™

2022-02-11T00:00:00
zdt
exploit

Polkit pkexec Local Privilege Escalation Exploit

2022-01-26T00:00:00
zdt
exploit

Polkit pkexec Local Privilege Escalation Vulnerability

2022-01-26T00:00:00
suse
unix

Security update for polkit (important)

2022-01-25T00:00:00
attackerkb
info

CVE-2021-4034

2022-03-03T00:00:00
kitploit
tools

PwnKit-Exploit - Proof Of Concept (PoC) CVE-2021-4034

2022-03-07T11:30:00
cloudlinux
unix

Fix of CVE: CVE-2021-4034

2022-01-26T15:45:42
debian
unix

[SECURITY] [DLA 2899-1] policykit-1 security update

2022-01-25T17:55:51
packetstorm
exploit

Polkit pkexec Local Privilege Escalation

2022-03-03T00:00:00