DEV Community

Cover image for CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Freedom Coder
Freedom Coder

Posted on • Edited on • Originally published at scyscan.com

CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

CVE ID

CVE-2021-4034

Vulnerability Name

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

  • Project: Red Hat
  • Product: Polkit

Date

  • Date Added: 2022-06-27
  • Due Date: 2022-07-18

Description

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-4034

Related Security News

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List

Top comments (0)