Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2021:2238

Опубликовано: 22 июл. 2021
Источник: rocky
Оценка: Important

Описание

Important: polkit security update

For more information visit https://errata.rockylinux.org/RLSA-2021:2238

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
polkit-docsnoarch11.el8_4.1polkit-docs-0.115-11.el8_4.1.noarch.rpm
polkit-develi68611.el8_4.1polkit-devel-0.115-11.el8_4.1.i686.rpm
polkit-develx86_6411.el8_4.1polkit-devel-0.115-11.el8_4.1.x86_64.rpm
polkit-libsx86_6411.el8_4.1polkit-libs-0.115-11.el8_4.1.x86_64.rpm
polkit-libsi68611.el8_4.1polkit-libs-0.115-11.el8_4.1.i686.rpm
polkitx86_6411.el8_4.1polkit-0.115-11.el8_4.1.x86_64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 3 лет назад

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.8
redhat
около 4 лет назад

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.8
nvd
больше 3 лет назад

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 7.8
debian
больше 3 лет назад

It was found that polkit could be tricked into bypassing the credentia ...

suse-cvrf
почти 4 года назад

Security update for polkit