Mageia 2022-0037: polkit security update
Summary
A local privilege escalation vulnerability was found on polkit's pkexec
utility. The pkexec application is a setuid tool designed to allow unprivileged
users to run commands as privileged users according predefined policies. The
current version of pkexec doesn't handle the calling parameters count correctly
and ends trying to execute environment variables as commands. An attacker can
leverage this by crafting environment variables in such a way it'll induce
pkexec to execute arbitrary code. When successfully executed the attack can
cause a local privilege escalation given unprivileged users administrative
rights on the target machine (CVE-2021-4034).
References
- https://bugs.mageia.org/show_bug.cgi?id=29944
- https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- https://access.redhat.com/errata/RHSA-2022:0267
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4034
Resolution
MGASA-2022-0037 - Updated polkit packages fix security vulnerability
SRPMS
- 8/core/polkit-0.118-1.2.mga8