CVE-2021-3560
Fixed in a distro release ExploitedEPSS 24%CVSS 7.8
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Products: polkit_project polkit, debian_linux, canonical ubuntu_linux, redhat virtualization, redhat virtualization_host, redhat openshift_container_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | polkit | 0.119-1 |
| Debian 12 | policykit-1 | 0.105-31 |
| Debian 13 | policykit-1 | 0.105-31 |
| Debian 14 | policykit-1 | 0.105-31 |
| Red Hat Enterprise Linux 8 | polkit | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-debuginfo | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-debugsource | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-devel | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-docs | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-libs | 0:0.115-11.el8_4.1 |
| Red Hat Enterprise Linux 8 | polkit-libs-debuginfo | 0:0.115-11.el8_4.1 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.3-6.rhaos4.7.git0d0f863.el7 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.3-6.rhaos4.7.git0d0f863.el8 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.3-6.rhaos4.7.git0d0f863.el7 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.3-6.rhaos4.7.git0d0f863.el8 |
| Red Hat openshift 4.7 | cri-o-debugsource | 0:1.20.3-6.rhaos4.7.git0d0f863.el8 |
| Red Hat openshift 4.7 | dhcp | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-client | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-client-debuginfo | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-common | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-debuginfo | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-debugsource | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-libs | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-libs-debuginfo | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-relay-debuginfo | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | dhcp-server-debuginfo | 12:4.3.6-41.el8_3.1 |
| Red Hat openshift 4.7 | openshift-clients | 0:4.7.0-202106252127.p0.git.8b4b094.el8 |
| Red Hat openshift 4.7 | openshift-clients | 0:4.7.0-202106252127.p0.git.8b4b094.el7 |
| Red Hat openshift 4.7 | openshift-clients-redistributable | 0:4.7.0-202106252127.p0.git.8b4b094.el7 |
| Red Hat openshift 4.7 | openshift-clients-redistributable | 0:4.7.0-202106252127.p0.git.8b4b094.el8 |
| Red Hat openshift 4.7 | openshift-kuryr | 0:4.7.0-202106232224.p0.git.c7654fb.el8 |
| Red Hat openshift 4.7 | openshift-kuryr-cni | 0:4.7.0-202106232224.p0.git.c7654fb.el8 |
| Red Hat openshift 4.7 | openshift-kuryr-common | 0:4.7.0-202106232224.p0.git.c7654fb.el8 |
| Red Hat openshift 4.7 | openshift-kuryr-controller | 0:4.7.0-202106232224.p0.git.c7654fb.el8 |
| Red Hat openshift 4.7 | polkit | 0:0.115-11.el8_3.2 |
| Red Hat openshift 4.7 | polkit-debuginfo | 0:0.115-11.el8_3.2 |
| Red Hat openshift 4.7 | polkit-debugsource | 0:0.115-11.el8_3.2 |
| Red Hat openshift 4.7 | polkit-libs | 0:0.115-11.el8_3.2 |
| Red Hat openshift 4.7 | polkit-libs-debuginfo | 0:0.115-11.el8_3.2 |
| Red Hat openshift 4.7 | python3-kuryr-kubernetes | 0:4.7.0-202106232224.p0.git.c7654fb.el8 |
| Red Hat rhel eus 8.1 | polkit | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-debuginfo | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-debugsource | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-devel | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-docs | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-libs | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.1 | polkit-libs-debuginfo | 0:0.115-9.el8_1.1 |
| Red Hat rhel eus 8.2 | polkit | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-debuginfo | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-debugsource | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-devel | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-docs | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-libs | 0:0.115-11.el8_2.1 |
| Red Hat rhel eus 8.2 | polkit-libs-debuginfo | 0:0.115-11.el8_2.1 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host | 0:4.4.6-20210615.0.el8_4 |
| Red Hat rhev hypervisor 4.4 | redhat-virtualization-host-image-update | 0:4.4.6-20210615.0.el8_4 |
| Rocky Linux 8 | polkit | 0:0.115-11.el8_4.1 |
| SUSE Enterprise Storage 6 | polkit | 0.114-3.12.1 |
| SUSE HPE Helion OpenStack 8 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Micro 5.0 | polkit | 0.116-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | polkit | 0.116-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | polkit | 0.116-3.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server 12 SP5 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | polkit | 0.114-3.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | polkit | 0.113-5.21.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | polkit | 0.113-5.21.1 |
| SUSE Manager Proxy 4.0 | polkit | 0.114-3.12.1 |
| SUSE Manager Retail Branch Server 4.0 | polkit | 0.114-3.12.1 |
| SUSE Manager Server 4.0 | polkit | 0.114-3.12.1 |
| SUSE OpenStack Cloud 8 | polkit | 0.113-5.21.1 |
| SUSE OpenStack Cloud 9 | polkit | 0.113-5.21.1 |
| SUSE OpenStack Cloud Crowbar 8 | polkit | 0.113-5.21.1 |
| SUSE OpenStack Cloud Crowbar 9 | polkit | 0.113-5.21.1 |
| Ubuntu 20.04 LTS | policykit-1 | 0.105-26ubuntu1.1 |
| Ubuntu 22.04 LTS | policykit-1 | 0.105-31 |
| openSUSE Leap 15.2 | polkit | 0.116-lp152.2.3.1 |
| openSUSE Leap 15.3 | polkit | 0.116-3.3.1 |
| openSUSE Tumbleweed | polkit | 0.118-7.2 |