CVE-2021-4034

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 94,9%

Kerentanan Out-of-bounds Write pada polkit project polkit, redhat enterprise linux server update services for sap solutions +28 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 27 Juni 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

Rincian

Terbit di NVD

28 Januari 2022

Terakhir diubah

15 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-125: Out-of-bounds Read

EPSS (30 hari)

94,9% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Masuk KEV

27 Juni 2022

Tenggat CISA

18 Juli 2022 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 mitigasi · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2025869 issue tracking · patch
• https://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683 patch
• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt exploit · mitigasi · advisory pihak ketiga
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-4034 pemerintah AS
• http://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.html advisory pihak ketiga · vdb entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-330556.pdf advisory pihak ketiga
• https://www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-403... exploit · advisory pihak ketiga
• https://www.starwindsoftware.com/security/sw-20220818-0001/ advisory pihak ketiga
• https://www.suse.com/support/kb/doc/?id=000020564 advisory pihak ketiga
• https://www.vicarius.io/vsociety/posts/pwnkit-pkexec-lpe-cve-2021-4034 exploit · advisory pihak ketiga