{"id":"CVE-2021-4034","aliases":["ALPINE-CVE-2021-4034","ALSA-2022:0267","AZL-8335","BELL-CVE-2021-4034","CLSA-2022-1643211736","CLSA-2022-1643211885","CLSA-2022-1643211942","CLSA-2022-1643212149","CLSA-2022-1643291562","DEBIAN-CVE-2021-4034","DLA-2899-1","DSA-5059-1","EUVD-2021-33934","GHSA-qgr2-xgqv-24x8","MGASA-2022-0037","OESA-2022-1502","RHSA-2022:0265","RHSA-2022:0266","RHSA-2022:0267","RHSA-2022:0268","RHSA-2022:0269","RHSA-2022:0270","RHSA-2022:0271","RHSA-2022:0272","RHSA-2022:0273","RHSA-2022:0274","RHSA-2022:0443","RHSA-2022:0540","RLSA-2022:0267","SUSE-SU-2022:0189-1","SUSE-SU-2022:0190-1","SUSE-SU-2022:0191-1","UBUNTU-CVE-2021-4034","USN-5252-1","USN-5252-2","openSUSE-SU-2022:0190-1","openSUSE-SU-2024:11780-1"],"status":"published","title":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.94921,"percentile":0.99862,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-125","CWE-787"],"published":"2022-01-25T00:00:00Z","modified":"2026-11-03T06:31:46Z","kev":{"date_added":"2022-06-27","due_date":"2022-07-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2022-06-27"},{"source":"kev","since":"2022-06-27"}],"exploits":[{"source":"pocgithub","id":"berdav/CVE-2021-4034","title":"berdav/CVE-2021-4034","date":"2022-01-25","url":"https://github.com/berdav/CVE-2021-4034"},{"source":"metasploit","id":"exploit/linux/local/cve_2021_4034_pwnkit_lpe_pkexec","title":"Local Privilege Escalation in polkits pkexec","type":"exploit","platform":"Linux","date":"2022-01-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/cve_2021_4034_pwnkit_lpe_pkexec"},{"source":"pocgithub","id":"ryaagard/CVE-2021-4034","title":"ryaagard/CVE-2021-4034","date":"2022-01-25","url":"https://github.com/ryaagard/CVE-2021-4034"},{"source":"pocgithub","id":"0x05a/my-cve-2021-4034-poc","title":"0x05a/my-cve-2021-4034-poc","date":"2022-01-26","url":"https://github.com/0x05a/my-cve-2021-4034-poc"},{"source":"pocgithub","id":"An00bRektn/CVE-2021-4034","title":"An00bRektn/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/An00bRektn/CVE-2021-4034"},{"source":"pocgithub","id":"Anonymous-Family/CVE-2021-4034","title":"Anonymous-Family/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Anonymous-Family/CVE-2021-4034"},{"source":"pocgithub","id":"Audiobahn/CVE-2021-4034","title":"Audiobahn/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Audiobahn/CVE-2021-4034"},{"source":"pocgithub","id":"Ayrx/CVE-2021-4034","title":"Ayrx/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Ayrx/CVE-2021-4034"},{"source":"pocgithub","id":"Immersive-Labs-Sec/CVE-2021-4034","title":"Immersive-Labs-Sec/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Immersive-Labs-Sec/CVE-2021-4034"},{"source":"pocgithub","id":"LukeGix/CVE-2021-4034","title":"LukeGix/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/LukeGix/CVE-2021-4034"},{"source":"pocgithub","id":"N1et/CVE-2021-4034","title":"N1et/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/N1et/CVE-2021-4034"},{"source":"pocgithub","id":"Nero22k/CVE-2021-4034","title":"Nero22k/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Nero22k/CVE-2021-4034"},{"source":"pocgithub","id":"PeterGottesman/pwnkit-exploit","title":"PeterGottesman/pwnkit-exploit","date":"2022-01-26","url":"https://github.com/PeterGottesman/pwnkit-exploit"},{"source":"pocgithub","id":"Y3A/CVE-2021-4034","title":"Y3A/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/Y3A/CVE-2021-4034"},{"source":"pocgithub","id":"artemis-mike/cve-2021-4034","title":"artemis-mike/cve-2021-4034","date":"2022-01-26","url":"https://github.com/artemis-mike/cve-2021-4034"},{"source":"pocgithub","id":"arthepsy/CVE-2021-4034","title":"arthepsy/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/arthepsy/CVE-2021-4034"},{"source":"pocgithub","id":"aus-mate/CVE-2021-4034-POC","title":"aus-mate/CVE-2021-4034-POC","date":"2022-01-26","url":"https://github.com/aus-mate/CVE-2021-4034-POC"},{"source":"pocgithub","id":"ayypril/CVE-2021-4034","title":"ayypril/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/ayypril/CVE-2021-4034"},{"source":"pocgithub","id":"azminawwar/CVE-2021-4034","title":"azminawwar/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/azminawwar/CVE-2021-4034"},{"source":"pocgithub","id":"c3l3si4n/pwnkit","title":"c3l3si4n/pwnkit","date":"2022-01-26","url":"https://github.com/c3l3si4n/pwnkit"},{"source":"pocgithub","id":"callrbx/pkexec-lpe-poc","title":"callrbx/pkexec-lpe-poc","date":"2022-01-26","url":"https://github.com/callrbx/pkexec-lpe-poc"},{"source":"pocgithub","id":"chenaotian/CVE-2021-4034","title":"chenaotian/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/chenaotian/CVE-2021-4034"},{"source":"pocgithub","id":"clubby789/CVE-2021-4034","title":"clubby789/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/clubby789/CVE-2021-4034"},{"source":"pocgithub","id":"dadvlingd/CVE-2021-4034","title":"dadvlingd/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/dadvlingd/CVE-2021-4034"},{"source":"pocgithub","id":"dzonerzy/poc-cve-2021-4034","title":"dzonerzy/poc-cve-2021-4034","date":"2022-01-26","url":"https://github.com/dzonerzy/poc-cve-2021-4034"},{"source":"pocgithub","id":"fdellwing/CVE-2021-4034","title":"fdellwing/CVE-2021-4034","date":"2022-01-26","url":"https://github.com/fdellwing/CVE-2021-4034"},{"source":"exploitdb","id":"EDB-50689","title":"PolicyKit-1 0.105-31 - Privilege Escalation","type":"local","platform":"linux","date":"2022-01-27","url":"https://www.exploit-db.com/exploits/50689"}],"exploits_more":160,"fixes":[{"ecosystem":"Alpine:v3.15","package":"polkit","fixed_in":["0.119-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"polkit","fixed_in":["0.120-r2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"polkit","fixed_in":["0.115-13.el8_5.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"polkit-devel","fixed_in":["0.115-13.el8_5.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"polkit-docs","fixed_in":["0.115-13.el8_5.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"polkit-libs","fixed_in":["0.115-13.el8_5.2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"polkit","fixed_in":["0.119-2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"gir1.2-polkit-1.0","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-agent-1-0","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-agent-1-dev","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-backend-1-0","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-backend-1-dev","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-gobject-1-0","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-gobject-1-dev","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"policykit-1","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"policykit-1-doc","fixed_in":["0.105-14.1ubuntu0.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"polkit","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"polkit-desktop-policy","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"polkit-devel","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"polkit-docs","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"polkit","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"polkit-desktop-policy","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"polkit-devel","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"polkit-docs","fixed_in":["0.96-11.el6_10.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"polkit","fixed_in":["0.115-11.el8.4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"polkit-devel","fixed_in":["0.115-11.el8.4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"polkit-docs","fixed_in":["0.115-11.el8.4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"polkit-libs","fixed_in":["0.115-11.el8.4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"polkit","fixed_in":["0.115-12.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"polkit-devel","fixed_in":["0.115-12.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"polkit-docs","fixed_in":["0.115-12.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"polkit-libs","fixed_in":["0.115-12.el8.5.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"policykit-1","fixed_in":["0.105-31.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"policykit-1","fixed_in":["0.105-31.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"policykit-1","fixed_in":["0.105-31.1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"policykit-1","fixed_in":["0.105-18+deb9u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"policykit-1","fixed_in":["0.105-25+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"policykit-1","fixed_in":["0.105-31+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"polkit","fixed_in":["0.118-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"polkit","fixed_in":["0.116-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"polkit","fixed_in":["0.116-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"polkit","fixed_in":["0.116-9.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-devel","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-docs","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-11.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-devel","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-docs","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-libs","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-11.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-devel","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-docs","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-devel","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-docs","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-libs","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-9.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"polkit","fixed_in":["0:0.96-11.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"polkit-debuginfo","fixed_in":["0:0.96-11.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"polkit-desktop-policy","fixed_in":["0:0.96-11.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"polkit-devel","fixed_in":["0:0.96-11.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"polkit-docs","fixed_in":["0:0.96-11.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit","fixed_in":["0:0.112-12.el7_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-debuginfo","fixed_in":["0:0.112-12.el7_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-devel","fixed_in":["0:0.112-12.el7_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-docs","fixed_in":["0:0.112-12.el7_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-debuginfo","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-devel","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-docs","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-debuginfo","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-devel","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-docs","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-debuginfo","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-devel","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-docs","fixed_in":["0:0.112-18.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit","fixed_in":["0:0.112-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-debuginfo","fixed_in":["0:0.112-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-devel","fixed_in":["0:0.112-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-docs","fixed_in":["0:0.112-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-devel","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-docs","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-devel","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-docs","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-debuginfo","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-devel","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-docs","fixed_in":["0:0.112-22.el7_7.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-debuginfo","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-devel","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-docs","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-debuginfo","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-devel","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-docs","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-debuginfo","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-devel","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-docs","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-debuginfo","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-devel","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-docs","fixed_in":["0:0.112-26.el7_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"polkit","fixed_in":["0:0.115-13.el8_5.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"polkit","fixed_in":["0.113-5.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"polkit","fixed_in":["0.114-3.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"policykit-1","fixed_in":["0.105-4ubuntu3.14.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"policykit-1","fixed_in":["0.105-14.1ubuntu0.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","fixed_in":["0.105-20ubuntu0.18.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","fixed_in":["0.105-26ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"policykit-1","fixed_in":["0.105-31ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"polkit","fixed_in":["0.116-3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"polkit","fixed_in":["0.120-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-13.el8_5.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-13.el8_5.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-13.el8_5.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-13.el8_5.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gir1.2-polkit-1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-agent-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-agent-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-backend-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-backend-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-gobject-1-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpolkit-gobject-1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"policykit-1-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"polkit-desktop-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"polkit-desktop-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.96-11.el6_10.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-11.el8.4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-11.el8.4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-11.el8.4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-11.el8.4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-12.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-12.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-12.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.115-12.el8.5.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-18+deb9u2"}]}],"versions":["0.105-18","0.105-18+deb9u1"]},{"source":"osv","ecosystem":"Debian:10","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-25+deb10u1"}]}],"versions":["0.105-25"]},{"source":"osv","ecosystem":"Debian:11","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31+deb11u1"}]}],"versions":["0.105-31"]},{"source":"osv","ecosystem":"Mageia:8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.118-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-9.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96-11.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96-11.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"polkit-desktop-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96-11.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96-11.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96-11.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-18.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-22.el7_7.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.112-26.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.21-20220126.0.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.21-20220126.0.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202202081536_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.10-202202081536_8.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-13.el8_5.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-4ubuntu3.14.04.6+esm1"}]}],"versions":["0.105-3ubuntu3","0.105-4ubuntu1","0.105-4ubuntu2","0.105-4ubuntu2.14.04.1","0.105-4ubuntu3.14.04.1","0.105-4ubuntu3.14.04.2","0.105-4ubuntu3.14.04.5","0.105-4ubuntu3.14.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+esm1"}]}],"versions":["0.105-11ubuntu2","0.105-13","0.105-13ubuntu1","0.105-14","0.105-14.1","0.105-14.1ubuntu0.1","0.105-14.1ubuntu0.4","0.105-14.1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-20ubuntu0.18.04.6"}]}],"versions":["0.105-18","0.105-20","0.105-20ubuntu0.18.04.1","0.105-20ubuntu0.18.04.4","0.105-20ubuntu0.18.04.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-26ubuntu1.2"}]}],"versions":["0.105-26ubuntu1","0.105-26ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31ubuntu1"}]}],"versions":["0.105-31"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-20ubuntu0.18.04.6"}]}],"versions":["0.105-18","0.105-20","0.105-20ubuntu0.18.04.1","0.105-20ubuntu0.18.04.4","0.105-20ubuntu0.18.04.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-26ubuntu1.2"}]}],"versions":["0.105-26ubuntu1","0.105-26ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-4ubuntu3.14.04.6+esm1"}]}],"versions":["0.105-3ubuntu3","0.105-4ubuntu1","0.105-4ubuntu2","0.105-4ubuntu2.14.04.1","0.105-4ubuntu3.14.04.1","0.105-4ubuntu3.14.04.2","0.105-4ubuntu3.14.04.5","0.105-4ubuntu3.14.04.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-14.1ubuntu0.5+esm1"}]}],"versions":["0.105-11ubuntu2","0.105-13","0.105-13ubuntu1","0.105-14","0.105-14.1","0.105-14.1ubuntu0.1","0.105-14.1ubuntu0.4","0.105-14.1ubuntu0.5"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.120-2.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"polkit_project","product":"polkit"},{"vendor":"red hat","product":"polkit"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_for_scientific_computing"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_server_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"siemens","product":"scalance_lpe9403_firmware"},{"vendor":"siemens","product":"sinumerik_edge"},{"vendor":"starwindsoftware","product":"command_center"},{"vendor":"starwindsoftware","product":"starwind_virtual_san"},{"vendor":"suse","product":"enterprise_storage"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_high_performance_computing"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_workstation_extension"},{"vendor":"suse","product":"manager_proxy"},{"vendor":"suse","product":"manager_server"}],"references":[{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2022-001","tags":["x_transferred","Mitigation","Vendor Advisory","advisory","article"]},{"url":"https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt","tags":["x_transferred","Exploit","Mitigation","Third Party Advisory","evidence","web","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025869","tags":["x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"https://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683","tags":["x_transferred","Patch","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.suse.com/support/kb/doc/?id=000020564","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-330556.pdf","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.starwindsoftware.com/security/sw-20220818-0001/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-4034/","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://www.vicarius.io/vsociety/posts/pwnkit-pkexec-lpe-cve-2021-4034","tags":["Exploit","Third Party Advisory","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-4034","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4034","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0265","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0266","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0267","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0268","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0269","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0270","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0271","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0272","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0273","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0274","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0443","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4034","tags":["report"]},{"url":"https://www.starwindsoftware.com/security/sw-20220818-0001"},{"url":"https://www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-4034"},{"url":"https://github.com/advisories/GHSA-qgr2-xgqv-24x8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-4034","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-0267.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-4034","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-4034","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1643211736","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1643211885.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1643211942.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1643212149.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1643291562.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4034","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0037.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29944","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1502","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0265.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4034","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0266.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0267.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0268.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0269.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0270.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0271.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0272.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0273.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0274.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019672","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0443.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25717","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2020-25717.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041489","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0540.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4155","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0185","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=722d94847de2","tags":["article"]},{"url":"https://github.com/Crusaders-of-Rust/CVE-2022-0185","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/7","tags":["article"]},{"url":"https://www.willsroot.io/2022/01/cve-2022-0185.html","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:0267","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220189-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194568","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4034","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220190-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220191-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4034","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5252-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5252-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGEROI6PUOTOXKFIH2MPKUQ3PI6VWLXQ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T00:00:00Z","modified":"2026-08-15T03:55:29.14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:33:07.697752Z"}],"euvd":[{"id":"EUVD-2021-33934","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T00:00:00Z","modified":"2026-08-15T03:55:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-06-27","updated_at":"2026-11-02T18:01:53.008072Z"}],"ghsa":[{"id":"GHSA-qgr2-xgqv-24x8","title":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-29T00:00:42Z","modified":"2025-10-22T00:33:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T15:04:08.198655Z"}],"kev":[{"id":"CVE-2021-4034","title":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","description":"The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","cwes":["CWE-787"],"kev":{"date_added":"2022-06-27","due_date":"2022-07-18","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T20:15:12.193Z","modified":"2026-08-15T04:17:57.927Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787","CWE-125"],"updated_at":"2026-11-02T14:07:04.178977Z"}],"osv":[{"id":"ALPINE-CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T20:15:12.193Z","modified":"2026-11-03T06:31:46.212385281Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"AZL-8335","title":"CVE-2021-4034 affecting package polkit for versions less than 0.119-2","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T20:15:12Z","modified":"2026-04-21T04:34:49.304856Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"BELL-CVE-2021-4034","title":"CVE-2021-4034 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:00.418548Z","modified":"2026-01-26T09:46:34.209559Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T20:15:12.193Z","modified":"2026-10-20T14:08:49.590159484Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-28T20:15:12.193Z","modified":"2026-10-23T18:03:33.00441719Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2022-1502","title":"polkit security update","description":"Define and Handle authorizations tool.\r\n\r\nSecurity Fix(es):\r\n\r\nA local privilege escalation vulnerability was found on polkit\u0026apos;s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn\u0026apos;t handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it\u0026apos;ll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.(CVE-2021-4034)","status":"published","published":"2022-01-27T11:04:46Z","modified":"2026-08-18T01:16:18.868252628Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:0265","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:56Z","modified":"2026-08-07T10:04:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0266","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:49Z","modified":"2026-08-07T10:04:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0267","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:31:49Z","modified":"2026-08-07T10:04:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0268","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:21Z","modified":"2026-08-07T10:04:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0269","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:44Z","modified":"2026-08-07T10:04:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0270","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:37Z","modified":"2026-08-07T10:04:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0271","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:30Z","modified":"2026-08-07T10:04:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0272","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:12Z","modified":"2026-08-07T10:04:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0273","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:31:57Z","modified":"2026-08-07T10:04:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0274","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-13T17:32:05Z","modified":"2026-08-07T10:04:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0443","title":"Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.21","status":"published","published":"2024-09-13T18:19:04Z","modified":"2026-08-07T10:04:55Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0540","title":"Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.10-1]","status":"published","published":"2024-09-13T17:33:47Z","modified":"2026-08-07T10:05:00Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RLSA-2022:0267","title":"Important: polkit security update","description":"The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.\n\nSecurity Fix(es):\n\n* polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-01-25T17:38:41Z","modified":"2026-02-05T03:30:07.806911Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-4034","description":"A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","status":"published","published":"2022-01-25T17:00:00Z","modified":"2026-04-22T13:00:10.468635Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2022:0267","title":"Important: polkit security update","description":"The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.\n\nSecurity Fix(es):\n\n* polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-01-25T17:38:41Z","modified":"2026-10-29T11:00:39.415413509Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1643211736","title":"Fix CVE(s): CVE-2021-4034","description":"\n   * SECURITY UPDATE: Local Privilege Escalation in pkexec\n     - debian/patches/CVE-2021-4034.patch: properly handle command-line\n       arguments in src/programs/pkcheck.c, src/programs/pkexec.c.\n     - CVE-2021-4034","status":"published","published":"2022-01-26T15:42:16Z","modified":"2026-06-04T10:04:25.056469Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643211885","title":"Fixed CVE-2021-4034 in polkit","description":"- CVE-2021-4034: pkexec: argv overflow results in local privilege esc.","status":"published","published":"2022-01-26T15:44:45Z","modified":"2026-06-01T00:33:24.185156059Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643211942","title":"Fix of CVE: CVE-2021-4034","description":"- CVE-2021-4034: pkexec: argv overflow results in local privilege esc.","status":"published","published":"2022-01-26T15:45:42Z","modified":"2026-06-01T00:33:15.343250331Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643212149","title":"Fix of CVE: CVE-2021-4034","description":"- CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector","status":"published","published":"2022-01-26T15:49:09Z","modified":"2026-06-01T00:33:10.01493224Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643291562","title":"Fix of CVE: CVE-2021-4034","description":"- CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector","status":"published","published":"2022-01-27T13:52:42Z","modified":"2026-06-01T00:33:13.461322959Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2899-1","title":"policykit-1 - security update","status":"published","published":"2022-01-25T00:00:00Z","modified":"2026-03-09T01:23:15.334948Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5059-1","title":"policykit-1 - security update","status":"published","published":"2022-01-25T00:00:00Z","modified":"2026-03-09T02:09:27.899981Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0037","title":"Updated polkit packages fix security vulnerability","description":"A local privilege escalation vulnerability was found on polkit's pkexec\nutility. The pkexec application is a setuid tool designed to allow unprivileged\nusers to run commands as privileged users according predefined policies. The\ncurrent version of pkexec doesn't handle the calling parameters count correctly\nand ends trying to execute environment variables as commands. An attacker can\nleverage this by crafting environment variables in such a way it'll induce\npkexec to execute arbitrary code. When successfully executed the attack can\ncause a local privilege escalation given unprivileged users administrative\nrights on the target machine (CVE-2021-4034).\n","status":"published","published":"2022-01-26T10:30:04Z","modified":"2026-04-16T04:41:44.744750797Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0190-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).\n","status":"published","published":"2022-01-25T18:10:19Z","modified":"2026-02-04T02:57:45.949764Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11780-1","title":"libpolkit-agent-1-0-0.120-2.1 on GA media","description":"These are all security issues fixed in the libpolkit-agent-1-0-0.120-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:41:20.432793Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0189-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).\n","status":"published","published":"2022-01-25T18:09:21Z","modified":"2026-02-04T03:17:20.702327Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0190-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).\n","status":"published","published":"2022-01-25T18:10:47Z","modified":"2026-02-04T04:10:07.259443Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0191-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).\n","status":"published","published":"2022-01-25T18:11:23Z","modified":"2026-02-04T03:45:36.326274Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5252-1","title":"policykit-1 vulnerability","description":"It was discovered that the PolicyKit pkexec tool incorrectly handled\ncommand-line arguments. A local attacker could use this issue to escalate\nprivileges to an administrator.\n","status":"published","published":"2022-01-25T17:58:39Z","modified":"2026-04-22T10:20:19.846604Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5252-2","title":"policykit-1 vulnerability","description":"USN-5252-1 fixed a vulnerability in policykit-1. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that the PolicyKit pkexec tool incorrectly handled\n command-line arguments. A local attacker could use this issue to escalate\n privileges to an administrator.\n","status":"published","published":"2022-01-25T19:30:35Z","modified":"2026-06-29T13:49:35.737855206Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}