CVE-2021-4034

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Polkit

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute…

28. Jan 2022

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/security/vulnerabilities/RHSB-2022-001
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2025869
• Hinweis
  http://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html
• Hinweis
  http://packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.html
• Hinweis
  https://cert-portal.siemens.com/productcert/pdf/ssa-330556.pdf
• Hinweis
  https://www.oracle.com/security-alerts/cpuapr2022.html
• Hinweis
  https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
• Hinweis
  https://www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-4034/
• Hinweis
  https://www.starwindsoftware.com/security/sw-20220818-0001/
• Hinweis
  https://www.suse.com/support/kb/doc/?id=000020564
• Hinweis
  https://www.vicarius.io/vsociety/posts/pwnkit-pkexec-lpe-cve-2021-4034
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-4034
• CISA
  Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
• NVD
  CVE-2021-4034