High 1 exploited CVE ELSA-2022-0267 1 CVE

Important: polkit security update (Oracle Linux 8)

Published Jan 25, 2022 · Updated Jan 25, 2022

Ecosystem: Oracle Linux

Summary

[0.115-13.0.1]
- Increase timeout to avoid defunct processes [Orabug: 26930744]

[0.115-13.el8_5.1]
- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	polkit	0:0.115-13.0.1.el8_5.1
Oracle Linux · 8	polkit-devel	0:0.115-13.0.1.el8_5.1
Oracle Linux · 8	polkit-docs	0:0.115-13.0.1.el8_5.1
Oracle Linux · 8	polkit-libs	0:0.115-13.0.1.el8_5.1

Vulnerabilities 1

High 7.8

CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine

Jan 28, 2022
KEV Jun 27, 2022