The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0267 advisory.

    [0.115-13.0.1]
    - Increase timeout to avoid defunct processes [Orabug: 26930744]

    [0.115-13.el8_5.1]
    - pkexec: argv overflow results in local privilege esc.
    - Resolves: CVE-2021-4034

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0268 advisory.

    The polkit packages provide a component for controlling system-wide privileges. This component provides a     uniform and organized way for non-privileged processes to communicate with privileged ones.

    Security Fix(es):

    * polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector     (CVE-2021-4034)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0274 advisory.

    The polkit packages provide a component for controlling system-wide privileges. This component provides a     uniform and organized way for non-privileged processes to communicate with privileged ones.

    Security Fix(es):

    * polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector     (CVE-2021-4034)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:0267 advisory.

  - polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of polkit installed on the remote host is prior to 0.112-26. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1745 advisory.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address security updates:

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:0267 advisory.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has polkit packages installed that are affected by a vulnerability:

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-026 advisory.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

  - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process     file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit     process outage duration is tied to the failing process being reaped and a new one being spawned     (CVE-2021-4115)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0267 advisory.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the polkit-0.117-8.el9 build changelog.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
157122	Oracle Linux 8 : polkit (ELSA-2022-0267)	Nessus	Oracle Linux Local Security Checks	1/26/2022	11/1/2024	high
157132	RHEL 8 : polkit (RHSA-2022:0268)	Nessus	Red Hat Local Security Checks	1/26/2022	11/7/2024	high
157136	RHEL 7 : polkit (RHSA-2022:0274)	Nessus	Red Hat Local Security Checks	1/26/2022	11/7/2024	high
157156	CentOS 8 : polkit (CESA-2022:0267)	Nessus	CentOS Local Security Checks	1/27/2022	1/16/2023	high
157182	Amazon Linux 2 : polkit (ALAS-2022-1745)	Nessus	Amazon Linux Local Security Checks	1/28/2022	1/16/2023	high
158121	OracleVM 3.4 : polkit (OVMSA-2022-0006)	Nessus	OracleVM Local Security Checks	2/17/2022	1/16/2023	high
158856	AlmaLinux 8 : polkit (ALSA-2022:0267)	Nessus	Alma Linux Local Security Checks	3/11/2022	1/16/2023	high
159099	EulerOS 2.0 SP5 : polkit (EulerOS-SA-2022-1335)	Nessus	Huawei Local Security Checks	3/21/2022	1/13/2023	high
159781	EulerOS 2.0 SP9 : polkit (EulerOS-SA-2022-1420)	Nessus	Huawei Local Security Checks	4/18/2022	1/13/2023	high
160797	NewStart CGSL MAIN 6.02 : polkit Vulnerability (NS-SA-2022-0073)	Nessus	NewStart CGSL Local Security Checks	5/9/2022	1/13/2023	high
167483	NewStart CGSL MAIN 6.02 : polkit Vulnerability (NS-SA-2022-0094)	Nessus	NewStart CGSL Local Security Checks	11/15/2022	1/12/2023	high
173080	Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2023-026)	Nessus	Amazon Linux Local Security Checks	3/21/2023	3/22/2023	high
184577	Rocky Linux 8 : polkit (RLSA-2022:0267)	Nessus	Rocky Linux Local Security Checks	11/6/2023	11/7/2023	high
191221	CentOS 9 : polkit-0.117-8.el9	Nessus	CentOS Local Security Checks	2/29/2024	4/26/2024	high
501030	Siemens (CVE-2021-4034)	Tenable OT Security	Tenable.ot	4/11/2023	11/25/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high