CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1Medium
7.8/ 10.0
Опубликовано
Обновлено
В атаках
Не зафиксировано
Публичный PoC
Отсутствует
Анализ подготовлен:CVE Futuretools Threat Intelligence
Верификация: MITRE CVE List · CISA KEV · NIST NVD
ОФИЦИАЛЬНЫЙ ПАТЧ НЕ ОПУБЛИКОВАН
Исправленная версия не указана. Проверьте бюллетень производителя.
01 // ТЕХНИЧЕСКАЯ СУТЬ УЯЗВИМОСТИ
В утилите pkexec из состава polkit обнаружена уязвимость, приводящая к локальному повышению привилегий до уровня администратора.
02 // АНАТОМИЯ АТАКИ И ДЕФЕКТ ЛОГИКИ
Утилита pkexec с установленным suid-битом некорректно обрабатывает количество переданных параметров вызова и пытается выполнить переменные окружения как команды. Злоумышленник может сформировать специальные переменные окружения и принудить утилиту выполнить произвольный код.
03 // СИСТЕМНЫЕ ПОСЛЕДСТВИЯ
Локальное повышение привилегий непривилегированного пользователя до прав администратора на целевой системе.
04 // МАТРИЦА ЗАТРОНУТЫХ ПАКЕТОВ
Точные диапазоны версий не зафиксированы в источниках
05 // ПЕРВОИСТОЧНИКИ И БЮЛЛЕТЕНИ (198)
- access.redhat.comhttps://access.redhat.com/security/vulnerabilities/RHSB-2022-001
- www.qualys.comhttps://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2025869
- gitlab.freedesktop.orghttps://gitlab.freedesktop.org/polkit/polkit/-/commit/a2bf5c9c83b6ae46cbd5c779d3055bff81ded683
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/166196/Polkit-pkexec-Local-Privilege-Escalation.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/166200/Polkit-pkexec-Privilege-Escalation.html
- www.suse.comhttps://www.suse.com/support/kb/doc/?id=000020564
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-330556.pdf
- www.starwindsoftware.comhttps://www.starwindsoftware.com/security/sw-20220818-0001/
- www.secpod.comhttps://www.secpod.com/blog/local-privilege-escalation-vulnerability-in-major-linux-distributions-cve-2021-4034/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/50689
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb
- github.comhttps://github.com/0x01-sec/CVE-2021-4034-
- github.comhttps://github.com/0x05a/my-cve-2021-4034-poc
- github.comhttps://github.com/0x4ndy/CVE-2021-4034-PoC
- github.comhttps://github.com/12bijaya/CVE-2021-4034-PwnKit-
- github.comhttps://github.com/A1vinSmith/CVE-2021-4034
- github.comhttps://github.com/ASG-CASTLE/CVE-2021-4034
- github.comhttps://github.com/Abbykito/KERNELexploits
- github.comhttps://github.com/Al1ex/CVE-2021-4034
- github.comhttps://github.com/Allu-mette/cve-2021-4034
- github.comhttps://github.com/Almorabea/pkexec-exploit
- github.comhttps://github.com/An00bRektn/CVE-2021-4034
- github.comhttps://github.com/Ankit-Ojha16/CVE-2021-4034
- github.comhttps://github.com/Anonymous-Family/CVE-2021-4034
- github.comhttps://github.com/AsierEgana/cve-2021-4034
- github.comhttps://github.com/Audiobahn/CVE-2021-4034
- github.comhttps://github.com/Ayrx/CVE-2021-4034
- github.comhttps://github.com/B1gN0Se/PwnKit_CVE-2021-4034
- github.comhttps://github.com/BugVex/Poison-HTB-Report
- github.comhttps://github.com/CYB3RK1D/CVE-2021-4034-POC
- github.comhttps://github.com/CronoX1/CVE-2021-4034
- github.comhttps://github.com/DERMOUCHERYAD/Linux-Privilege-Escalation-Pentest-Lab
- github.comhttps://github.com/DanaEpp/pwncat_pwnkit
- github.comhttps://github.com/DosAmp/pkwned
- github.comhttps://github.com/EstamelGG/CVE-2021-4034-NoGCC
- github.comhttps://github.com/EuJin03/CVE-2021-4034-PoC
- github.comhttps://github.com/FDlucifer/Pwnkit-go
- github.comhttps://github.com/FancySauce/PwnKit-CVE-2021-4034
- github.comhttps://github.com/Fato07/Pwnkit-exploit
- github.comhttps://github.com/G01d3nW01f/CVE-2021-4034
- github.comhttps://github.com/Geni0r/cve-2021-4034-poc
- github.comhttps://github.com/HellGateCorp/pwnkit
- github.comhttps://github.com/HrishitJoshi/CVE-2021-4034
- github.comhttps://github.com/ITMarcin2211/Polkit-s-Pkexec-CVE-2021-4034
- github.comhttps://github.com/Immersive-Labs-Sec/CVE-2021-4034
- github.comhttps://github.com/Jesrat/make_me_root
- github.comhttps://github.com/Joffr3y/Polkit-CVE-2021-4034-HLP
- github.comhttps://github.com/JohnGilbert57/CVE-2021-4034-Capture-the-flag
- github.comhttps://github.com/JoyGhoshs/CVE-2021-4034
- github.comhttps://github.com/Kirill89/CVE-2021-4034
- github.comhttps://github.com/LJP-TW/CVE-2021-4034
- github.comhttps://github.com/Leemyunglyul/cve-2021-4034-mock
- github.comhttps://github.com/LucasPDiniz/CVE-2021-4034
- github.comhttps://github.com/LukeGix/CVE-2021-4034
- github.comhttps://github.com/Milad-Rafie/PwnKit-Local-Privilege-Escalation-Vulnerability-Discovered-in-polkit-s-pkexec-CVE-2021-4034
- github.comhttps://github.com/Murguii/DEV-CVE-2021-4034
- github.comhttps://github.com/N1et/CVE-2021-4034
- github.comhttps://github.com/NULL0B/CVE-2021-4034
- github.comhttps://github.com/NeonWhiteRabbit/CVE-2021-4034
- github.comhttps://github.com/Nero22k/CVE-2021-4034
- github.comhttps://github.com/NiS3x/CVE-2021-4034
- github.comhttps://github.com/Nosferatuvjr/PwnKit
- github.comhttps://github.com/OXDBXKXO/ez-pwnkit
- github.comhttps://github.com/Part01-Pai/Polkit-Permission-promotion-compiled
- github.comhttps://github.com/PeterGottesman/pwnkit-exploit
- github.comhttps://github.com/Pixailz/CVE-2021-4034
- github.comhttps://github.com/Plethore/CVE-2021-4034
- github.comhttps://github.com/Pol-Ruiz/CVE-2021-4034
- github.comhttps://github.com/PwnFunction/CVE-2021-4034
- github.comhttps://github.com/RakhithJK/CVE-2021-4034-new
- github.comhttps://github.com/Rvn0xsy/CVE-2021-4034
- github.comhttps://github.com/Silencecyber/cve-2021-4034
- github.comhttps://github.com/Squirre17/CVE-2021-4034
- github.comhttps://github.com/TW-D/PwnKit-Vulnerability_CVE-2021-4034
- github.comhttps://github.com/Tanmay-N/CVE-2021-4034
- github.comhttps://github.com/TanmoyG1800/CVE-2021-4034
- github.comhttps://github.com/TomSgn/CVE-2021-4034
- github.comhttps://github.com/TotallyNotAHaxxer/CVE-2021-4034
- github.comhttps://github.com/X-Projetion/Exploiting-PwnKit-CVE-2021-4034-
- github.comhttps://github.com/Y3A/CVE-2021-4034
- github.comhttps://github.com/Yakumwamba/POC-CVE-2021-4034
- github.comhttps://github.com/Z3R0space/CVE-2021-4034
- github.comhttps://github.com/an0n7os/CVE-2021-4034
- github.comhttps://github.com/antoinenguyen-09/CVE-2021-4034
- github.comhttps://github.com/artemis-mike/cve-2021-4034
- github.comhttps://github.com/arthepsy/CVE-2021-4034
- github.comhttps://github.com/asepsaepdin/CVE-2021-4034
- github.comhttps://github.com/ashutoshrohilla/CVE-2021-4034
- github.comhttps://github.com/aus-mate/CVE-2021-4034-POC
- github.comhttps://github.com/axisops/CVE-2021-4034
- github.comhttps://github.com/ayoub-elbouzi/CVE-2021-4034-Pwnkit
- github.comhttps://github.com/ayypril/CVE-2021-4034
- github.comhttps://github.com/azminawwar/CVE-2021-4034
- github.comhttps://github.com/berdav/CVE-2021-4034
- github.comhttps://github.com/boro03/CVE-2021-4034
- github.comhttps://github.com/c3c/CVE-2021-4034
- github.comhttps://github.com/c3l3si4n/pwnkit
- github.comhttps://github.com/callrbx/pkexec-lpe-poc
- github.comhttps://github.com/caviartank21/CVE-2021-4034
- github.comhttps://github.com/cd80-ctf/CVE-2021-4034
- github.comhttps://github.com/cdxiaodong/CVE-2021-4034-touch
- github.comhttps://github.com/cerodah/CVE-2021-4034
- github.comhttps://github.com/chenaotian/CVE-2021-4034
- github.comhttps://github.com/ck00004/CVE-2021-4034
- github.comhttps://github.com/clubby789/CVE-2021-4034
- github.comhttps://github.com/codiobert/pwnkit-scanner
- github.comhttps://github.com/cspshivam/cve-2021-4034
- github.comhttps://github.com/dadvlingd/CVE-2021-4034
- github.comhttps://github.com/defhacks/cve-2021-4034
- github.comhttps://github.com/deoxykev/CVE-2021-4034-Rust
- github.comhttps://github.com/devianntsec/CVE-2021-4034
- github.comhttps://github.com/dh4r4/PwnKit-CVE-2021-4034-
- github.comhttps://github.com/dr4xp/pwnkit-helper
- github.comhttps://github.com/drapl0n/pwnKit
- github.comhttps://github.com/dzonerzy/poc-cve-2021-4034
- github.comhttps://github.com/edsonjt81/CVE-2021-4034-Linux
- github.comhttps://github.com/eshkoreee/CVE-2021-4034
- github.comhttps://github.com/evdenis/lsm_bpf_check_argc0
- github.comhttps://github.com/evkl1d/CVE-2021-4034
- github.comhttps://github.com/fdellwing/CVE-2021-4034
- github.comhttps://github.com/fei9747/CVE-2021-4034
- github.comhttps://github.com/fnknda/CVE-2021-4034_POC
- github.comhttps://github.com/galoget/PwnKit-CVE-2021-4034
- github.comhttps://github.com/gbrsh/CVE-2021-4034
- github.comhttps://github.com/h3x0v3rl0rd/CVE-2021-4034
- github.comhttps://github.com/h3x0v3rl0rd/CVE-2021-4034_Python3
- github.comhttps://github.com/hahaleyile/CVE-2021-4034
- github.comhttps://github.com/hohn/codeql-sample-polkit
- github.comhttps://github.com/igonzalez357/CVE-2021-4034-PwnKit-
- github.comhttps://github.com/ikerSandoval003/CVE-2021-4034
- github.comhttps://github.com/iurhfiu6/CVE-2021-4034
- github.comhttps://github.com/jayhutajulu1/PwnKit-CVE-2021-4034
- github.comhttps://github.com/jcatala/f_poc_cve-2021-4034
- github.comhttps://github.com/joeammond/CVE-2021-4034
- github.comhttps://github.com/jostmart/-CVE-2021-4034
- github.comhttps://github.com/jpmcb/pwnkit-go
- github.comhttps://github.com/jscamposx/hack
- github.comhttps://github.com/kali-guru/Pwnkit-CVE-2021-4034
- github.comhttps://github.com/kimusan/pkwner
- github.comhttps://github.com/krleejihyeong/WHS4_CVE-2021-4034
- github.comhttps://github.com/locksec/CVE-2021-4034
- github.comhttps://github.com/luckythandel/CVE-2021-4034
- github.comhttps://github.com/luijait/PwnKit-Exploit
- github.comhttps://github.com/ly4k/PwnKit
- github.comhttps://github.com/mac3d0/CVE-2021-4034-pwnkit
- github.comhttps://github.com/marcosChoucino/CVE-2021-4034
- github.comhttps://github.com/mebeim/CVE-2021-4034
- github.comhttps://github.com/milot/dissecting-pkexec-cve-2021-4034
- github.comhttps://github.com/moldabekov/CVE-2021-4034
- github.comhttps://github.com/movvamrocks/PwnKit-CVE-2021-4034
- github.comhttps://github.com/mutur4/CVE-2021-4034
- github.comhttps://github.com/nagorealbisu/CVE-2021-4034
- github.comhttps://github.com/navisec/CVE-2021-4034-PwnKit
- github.comhttps://github.com/nel0x/pwnkit-vulnerability
- github.comhttps://github.com/nicoibarburu/CVE-2021-4034
- github.comhttps://github.com/nikaiw/CVE-2021-4034
- github.comhttps://github.com/nikip72/CVE-2021-4034
- github.comhttps://github.com/oreosec/pwnkit
- github.comhttps://github.com/pengalaman-1t/CVE-2021-4034
- github.comhttps://github.com/phvilasboas/CVE-2021-4034
- github.comhttps://github.com/pombredanne/CVE-2021-4034
- github.comhttps://github.com/ps-interactive/lab_cve-2021-4034-polkit-emulation-and-detection
- github.comhttps://github.com/pyhrr0/pwnkit
- github.comhttps://github.com/r00t-byte/Pwnkit-CVE-2021-4034-LPE
- github.comhttps://github.com/ramahmdr/PwnKit
- github.comhttps://github.com/robemmerson/CVE-2021-4034
- github.comhttps://github.com/rusakalimantan/PwnKit-CVE-2021-4034
- github.comhttps://github.com/rvzsec/CVE-2021-4034
- github.comhttps://github.com/ryaagard/CVE-2021-4034
- github.comhttps://github.com/san3ncrypt3d/CVE-2021-4034-POC
- github.comhttps://github.com/scent2d/PoC-CVE-2021-4034
- github.comhttps://github.com/silocityit/cve-2021-4034-playground
- github.comhttps://github.com/sofire/polkit-0.96-CVE-2021-4034
- github.comhttps://github.com/sunny0day/CVE-2021-4034
- github.comhttps://github.com/tachote/CVE-2021-4034
- github.comhttps://github.com/tahaafarooq/poppy
- github.comhttps://github.com/teelrabbit/Polkit-pkexec-exploit-for-Linux
- github.comhttps://github.com/thatstraw/CVE-2021-4034
- github.comhttps://github.com/toecesws/CVE-2021-4034
- github.comhttps://github.com/tzwlhack/CVE-2021-4034
- github.comhttps://github.com/usmansec/-CVE-2021-4034
- github.comhttps://github.com/v-rzh/CVE-2021-4034
- github.comhttps://github.com/vaibhavkrishna12004/ubuntu-privesc-lab
- github.comhttps://github.com/vilasboasph/CVE-2021-4034
- github.comhttps://github.com/vorkampfer/pwnkit_safety_check
- github.comhttps://github.com/wechicken456/CVE-2021-4034-CTF-writeup
- github.comhttps://github.com/whokilleddb/CVE-2021-4034
- github.comhttps://github.com/wongwaituck/CVE-2021-4034
- github.comhttps://github.com/wudicainiao/cve-2021-4034
- github.comhttps://github.com/x04000/AutoPwnkit
- github.comhttps://github.com/x04000/CVE-2021-4034
- github.comhttps://github.com/xcanwin/CVE-2021-4034-UniontechOS
- github.comhttps://github.com/zcrosman/cve-2021-4034
- github.comhttps://github.com/zhzyker/CVE-2021-4034
- github.comhttps://github.com/ziadsaleemi/polkit_CVE-2021-4034
- github.comhttps://github.com/zxybfq/CVE-2021-4034
06 // ЦИТИРОВАНИЕ ДАННЫХ И ИСТОЧНИК
Для включения аналитической карточки в отчёты по безопасности, матрицы рисков или исследовательские публикации используйте стандартизированный формат цитирования:
Библиографическая ссылка (Plain text)
CVE Futuretools (2026). Анализ уязвимости CVE-2021-4034: A local privilege escalation vulnerability was found on polkit's pkexec utility.. URL: https://cve.futuretools.ru/cve/CVE-2021-4034
BibTeX формат (LaTeX)
@misc{cve_futuretools_cve_2021_4034,
title = {{CVE-2021-4034: A local privilege escalation vulnerability was found on polkit's pkexec utility.}},
author = {{CVE Futuretools}},
year = {2026},
howpublished = {\url{https://cve.futuretools.ru/cve/CVE-2021-4034}},
note = {Оперативный инженерный анализ киберугроз}
}