logo

Database

Lack of data validation In policykit-1

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-40342. NVD-2021-40343. OSV-DEBIAN-2021-40344. OSV-2021-40345. SECURITY-TRACKER-CVE-2021-4034

References

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40342. https://github.com/berdav/CVE-2021-40343. https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.