oss-security - Re: pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <YfFBAVnpRJemuCed@xosc.org>
Date: Wed, 26 Jan 2022 13:39:29 +0100
From: Matthias Schmidt <oss-sec@...c.org>
To: oss-security@...ts.openwall.com
Subject: Re: pwnkit: Local Privilege Escalation in polkit's
 pkexec (CVE-2021-4034)

Hi,

* Qualys Security Advisory wrote:
> 
> Qualys Security Advisory
> 
> pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

This was already mentioned in 2013 in a blog post, however, it seems the
author didn't realize the consequences of their finding:

https://ryiron.wordpress.com/2013/12/16/argv-silliness/

Cheers

	Matthias

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.