Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-4115

Опубликовано: 14 фев. 2022
Источник: redhat
CVSS3: 6.2
EPSS Низкий

Описание

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6polkitNot affected
Red Hat Enterprise Linux 7polkitNot affected
Red Hat Enterprise Linux 9polkitNot affected
Red Hat Enterprise Linux 8polkitFixedRHSA-2022:154626.04.2022

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-403
https://bugzilla.redhat.com/show_bug.cgi?id=2007534polkit: file descriptor leak allows an unprivileged user to cause a crash

EPSS

Процентиль: 1%
0.00013
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

CVSS3: 5.5
nvd
больше 3 лет назад

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

CVSS3: 5.5
debian
больше 3 лет назад

There is a flaw in polkit which can allow an unprivileged user to caus ...

suse-cvrf
больше 3 лет назад

Security update for polkit

suse-cvrf
больше 2 лет назад

Security update for polkit

EPSS

Процентиль: 1%
0.00013
Низкий

6.2 Medium

CVSS3