Remco00
Verified User
- Joined
- Feb 22, 2006
- Messages
- 265
The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program that is installed by default on every major Linux distribution. This easily exploited vulnerability allows any unprivileged user to gain full root privileges on a vulnerable host by exploiting this vulnerability in its default configuration.
https://blog.qualys.com/vulnerabili...ty-discovered-in-polkits-pkexec-cve-2021-4034
https://blog.qualys.com/vulnerabili...ty-discovered-in-polkits-pkexec-cve-2021-4034