CVE-2021-4034 Known ransomware use

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Red Hat — Polkit

Added to KEV catalog: 27 June 2022
Federal remediation due date: 18 July 2022
Weakness classification (CWE): CWE-787

CISA Description

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-4034

View on NVD View on MITRE CVE View full CISA catalog

More Red Hat Vulnerabilities

CVE-2015-5287

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

CVE-2015-3246

Red Hat Libuser Race Condition Vulnerability

CVE-2018-14667

Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

CVE-2021-3560

Red Hat Polkit Incorrect Authorization Vulnerability

CVE-2010-1428

Red Hat JBoss Information Disclosure Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services