High 1 exploited CVE ELSA-2022-0274 1 CVE

Important: polkit security update (Oracle Linux 7)

Published Jan 25, 2022 · Updated Jan 25, 2022

Ecosystem: Oracle Linux

Summary

[0.112-26.0.1]
- Increase timeout to avoid defunct processes [Orabug: 26930744]

[0.112-26.1]
- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	polkit	0:0.112-26.0.1.el7_9.1
Oracle Linux · 7	polkit-devel	0:0.112-26.0.1.el7_9.1
Oracle Linux · 7	polkit-docs	0:0.112-26.0.1.el7_9.1

Vulnerabilities 1

High 7.8

CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine

Jan 28, 2022
KEV Jun 27, 2022