IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High KEV

CVE-2021-3560Red Hat Polkit Incorrect Authorization Vulnerability

polkit Published: (4 years ago)

Known exploited — Red Hat Polkit Incorrect Authorization Vulnerability

CISA confirmed this vulnerability is used in real attacks on 12.05.2023. Remediation deadline for US federal agencies: 02.06.2023.

Required action: Apply updates per vendor instructions. https://bugzilla.redhat.com/show_bug.cgi?id=1961710; https://nvd.nist.gov/vuln/detail/CVE-2021-3560

Description

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Weakness (CWE): CWE-863CWE-754

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
canonical ubuntu linux 20.04
debian debian linux 11.0
polkit project polkit < 0.119
redhat openshift container platform 4.7
redhat virtualization 4.0
redhat virtualization host 4.0
— polkit polkit 0.119

References and patches

CPE matches (NVD) (6)
  • cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:* < 0.119
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:4.7:*:*:*:*:*:*:*

Recent CVEs in the same product — Ubuntu 20.04 LTS

9.2Critical
CVE-2026-111497 KEV

Out-of-Bounds Write in Google Brotli Decoder

Google Brotli; Siemens Heliox Dual Port 60kW; Siemens Heliox Flex Pro; Siemens SICHARGE FLEX

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

83%EPSS
9.2Critical
CVE-2026-109619 KEV

RCE via stale global state

PHP Group PHP; Siemens AX4; Siemens CADRA; Siemens Capital

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

100%EPSS
9.2Critical
CVE-2026-109618 KEV

RCE via OOM corruption

PHP Group PHP; Siemens AX4; Siemens CADRA; Siemens Capital

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

100%EPSS
7.7High
CVE-2026-61642

Squid Request Smuggling in HTTP Transfer-Encoding

squid-cache squid

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing (`src/HttpHeader.cc`) accept…

2.0%EPSS
7.8High
CVE-2026-101258

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document pa…