Lucene search
UbuntuUSN-5252-2HistoryJan 25, 2022 - 12:00 a.m.
PolicyKit vulnerability
2022-01-2500:00:00
ubuntu.com
189
Releases
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- policykit-1 - framework for managing administrative policies and privileges
Details
USN-5252-1 fixed a vulnerability in policykit-1. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that the PolicyKit pkexec tool incorrectly handled
command-line arguments. A local attacker could use this issue to escalate
privileges to an administrator.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 16.04 | noarch | policykit-1 | < 0.105-14.1ubuntu0.5+esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | gir1.2-polkit-1.0 | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-agent-1-0 | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-agent-1-0-dbgsym | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-agent-1-dev | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-backend-1-0 | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-backend-1-0-dbgsym | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-backend-1-dev | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-gobject-1-0 | < 0.105-14.1ubuntu0.5 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libpolkit-gobject-1-0-dbgsym | < 0.105-14.1ubuntu0.5 | UNKNOWN |
References
Related
nessus
nessus
EulerOS Virtualization 3.0.6.6 : polkit (EulerOS-SA-2022-2527)
2022-10-09 00:00:00
Rocky Linux 8 : polkit (RLSA-2022:0267)
2023-11-06 00:00:00
Debian DSA-5059-1 : policykit-1 - security update
2022-01-31 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Read in Polkit Project Polkit
2022-08-20 05:31:59
Exploit for Out-of-bounds Write in Polkit Project Polkit
2022-07-27 10:15:37
Exploit for Out-of-bounds Write in Polkit Project Polkit
2022-01-26 02:21:08
qualysblog
qualysblog
debian
debian
[SECURITY] [DSA 5059-1] policykit-1 security update
2022-01-25 17:46:26
ibm
ibm
gentoo
gentoo
Polkit: Local privilege escalation
2022-01-27 00:00:00
saint
saint
Polkit pkexec privilege elevation
2022-01-27 00:00:00
Polkit pkexec privilege elevation
2022-01-27 00:00:00
alpinelinux
alpinelinux
CVE-2021-4034
2022-01-28 20:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2022-1698)
2022-05-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0189-1)
2022-01-26 00:00:00
Debian: Security Advisory (DLA-2899-1)
2022-01-26 00:00:00
mageia
mageia
Updated polkit packages fix security vulnerability
2022-01-26 13:30:04
redhat
redhat
(RHSA-2022:0266) Important: polkit security update
2022-01-25 17:35:29
(RHSA-2022:0271) Important: polkit security update
2022-01-25 18:04:21
(RHSA-2022:0265) Important: polkit security update
2022-01-25 17:32:45
centos
centos
polkit security update
2022-01-26 20:42:52
rocky
rocky
polkit security update
2022-01-26 21:26:22
ics
ics
Siemens SCALANCE LPE 4903 and SINUMERIK Edge
2022-06-16 12:00:00
redhatcve
redhatcve
CVE-2021-4034
2022-05-07 14:22:00
suse
suse
Security update for polkit (important)
2022-01-25 00:00:00
oraclelinux
oraclelinux
polkit security update
2022-01-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-4034 affecting package polkit 0.116-7
2022-02-01 04:53:56
CVE-2021-4034 affecting package polkit for versions less than 0.119-2
2022-04-09 06:51:57
zdt
zdt
Polkit pkexec Local Privilege Escalation Exploit
2022-01-26 00:00:00
PolicyKit-1 0.105-31 - Privilege Escalation Exploit
2022-01-27 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4034
2022-01-26 15:45:42
cve
cve
CVE-2021-4034
2022-01-28 20:15:00
talosblog
talosblog
Alchimist: A new attack framework in Chinese for Mac, Linux and Windows
2022-10-13 12:00:00
osv
osv
Important: polkit security update
2022-01-25 17:38:41
policykit-1 - security update
2022-01-25 00:00:00
threatpost
threatpost
Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’
2022-01-26 17:52:49
trendmicroblog
trendmicroblog
packetstorm
packetstorm
Polkit pkexec Local Privilege Escalation
2022-03-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2022-2012
2022-01-27 13:18:29
Advisory ROSA-SA-2022-2013
2022-01-31 14:03:39
cisa_kev
cisa_kev
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
2022-06-27 00:00:00
ubuntu
ubuntu
PolicyKit vulnerability
2022-01-25 00:00:00
kitploit
kitploit
PwnKit-Exploit - Proof Of Concept (PoC) CVE-2021-4034
2022-03-07 11:30:00
attackerkb
attackerkb
CVE-2021-4034
2022-01-28 00:00:00
f5
f5
K46015513 : Polkit pkexec vulnerability CVE-2021-4034
2022-01-29 00:00:00
checkpoint_security
checkpoint_security
thn
thn
redos
redos
ROS-20220128-01
2022-01-28 00:00:00
prion
prion
Privilege escalation
2022-01-28 20:15:00
veracode
veracode
Privilege Escalation
2022-01-26 05:22:38
slackware
slackware
[slackware-security] polkit
2022-01-26 05:02:16
fedora
fedora
[SECURITY] Fedora 34 Update: polkit-0.117-3.fc34.2
2022-01-26 23:42:37