High 1 exploited CVE ELSA-2021-2238 1 CVE

Important: polkit security update (Oracle Linux 8)

Published Jun 4, 2021 · Updated Jun 4, 2021

Ecosystem: Oracle Linux

Summary

[0.115-11.0.1]
- Increase timeout to avoid defunct processes [Orabug: 26930744]

[0.115-11.1]
- early disconnection from D-Bus results in privilege esc.
- Resolves: CVE-2021-3560

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	polkit	0:0.115-11.0.1.el8_4.1
Oracle Linux · 8	polkit-devel	0:0.115-11.0.1.el8_4.1
Oracle Linux · 8	polkit-docs	0:0.115-11.0.1.el8_4.1
Oracle Linux · 8	polkit-libs	0:0.115-11.0.1.el8_4.1

Vulnerabilities 1

High 7.8

CVE-2021-3560 Exploited Public exploit EPSS 22%

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

policykit-1 policykit-1 polkit Debian Ubuntu Alpine

Feb 16, 2022
KEV May 12, 2023