CVE catalog

CVE-2021-4034

policykit-1: CVE-2021-4034

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
Exploitation
CISA Known Exploited Vulnerabilities
EPSS
94.92% · Oct 25, 2026

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpolicykit-1sid128-1fixed
Debianpolicykit-1forky128-1fixed
Debianpolicykit-1trixie126-2fixed
Debianpolicykit-1bookworm122-3fixed
CpepolkitNot reported121fixed
Cpeenterprise_linux_server_update_services_for_sap_solutionsNot reportedNot reportedunknown
Cpeenterprise_linuxNot reportedNot reportedunknown
Cpeenterprise_linux_desktopNot reportedNot reportedunknown
Cpeenterprise_linux_eusNot reportedNot reportedunknown
Cpeenterprise_linux_for_ibm_z_systemsNot reportedNot reportedunknown
Cpeenterprise_linux_for_ibm_z_systems_eusNot reportedNot reportedunknown
Cpeenterprise_linux_for_power_big_endianNot reportedNot reportedunknown
Cpeenterprise_linux_for_power_little_endianNot reportedNot reportedunknown
Cpeenterprise_linux_for_power_little_endian_eusNot reportedNot reportedunknown
Cpeenterprise_linux_for_scientific_computingNot reportedNot reportedunknown
Cpeenterprise_linux_serverNot reportedNot reportedunknown
Cpeenterprise_linux_server_ausNot reportedNot reportedunknown
Ubuntupolicykit-1pro0.105-11ubuntu2vulnerable
Ubuntupolicykit-1pro0.105-13vulnerable
Ubuntupolicykit-1pro0.105-13ubuntu1vulnerable
Ubuntupolicykit-1pro0.105-14vulnerable
Ubuntupolicykit-1pro0.105-14.1vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.1vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.4vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.5vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.5+esm1fixed
Ubuntupolicykit-1pro0.105-11ubuntu2vulnerable
Ubuntupolicykit-1pro0.105-13vulnerable
Ubuntupolicykit-1pro0.105-13ubuntu1vulnerable
Ubuntupolicykit-1pro0.105-14vulnerable
Ubuntupolicykit-1pro0.105-14.1vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.1vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.4vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.5vulnerable
Ubuntupolicykit-1pro0.105-14.1ubuntu0.5+esm1fixed
Ubuntupolicykit-118.040.105-18vulnerable
Ubuntupolicykit-118.040.105-20vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.1vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.4vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.5vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.6fixed
Ubuntupolicykit-120.040.105-26ubuntu1vulnerable
Ubuntupolicykit-120.040.105-26ubuntu1.1vulnerable
Ubuntupolicykit-120.040.105-26ubuntu1.2fixed
Ubuntupolicykit-122.040.105-31vulnerable
Ubuntupolicykit-122.040.105-31ubuntu1fixed
Ubuntupolicykit-118.040.105-18vulnerable
Ubuntupolicykit-118.040.105-20vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.1vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.4vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.5vulnerable
Ubuntupolicykit-118.040.105-20ubuntu0.18.04.6fixed
Ubuntupolicykit-120.040.105-26ubuntu1vulnerable
Ubuntupolicykit-120.040.105-26ubuntu1.1vulnerable
Ubuntupolicykit-120.040.105-26ubuntu1.2fixed
Susepolkitlinux enterprise module for basesystem 15 sp30.116-3.6.1fixed
Susepolkitlinux enterprise high performance computing 15 sp2-espos0.116-3.6.1fixed
Susepolkitlinux enterprise high performance computing 15 sp2-ltss0.116-3.6.1fixed
Susepolkitlinux enterprise server 15 sp2-bcl0.116-3.6.1fixed
Susepolkitlinux enterprise server 15 sp2-ltss0.116-3.6.1fixed
Susepolkitlinux enterprise server for sap applications 15 sp20.116-3.6.1fixed
Susepolkitmanager proxy 4.10.116-3.6.1fixed
Susepolkitmanager retail branch server 4.10.116-3.6.1fixed
Susepolkitmanager server 4.10.116-3.6.1fixed
Susepolkitlinux enterprise micro 5.00.116-3.6.1fixed
Susepolkitlinux enterprise micro 5.10.116-3.6.1fixed
Susepolkitenterprise storage 70.116-3.6.1fixed
Susepolkitlinux enterprise high performance computing 15-espos0.114-3.15.1fixed
Susepolkitlinux enterprise high performance computing 15-ltss0.114-3.15.1fixed
Susepolkitlinux enterprise high performance computing 15 sp1-espos0.114-3.15.1fixed
Susepolkitlinux enterprise high performance computing 15 sp1-ltss0.114-3.15.1fixed
Susepolkitlinux enterprise server 15-ltss0.114-3.15.1fixed
Susepolkitlinux enterprise server 15 sp1-bcl0.114-3.15.1fixed
Susepolkitlinux enterprise server 15 sp1-ltss0.114-3.15.1fixed
Susepolkitlinux enterprise server for sap applications 150.114-3.15.1fixed
Susepolkitlinux enterprise server for sap applications 15 sp10.114-3.15.1fixed
Susepolkitenterprise storage 60.114-3.15.1fixed
Susepolkithpe helion openstack 80.113-5.24.1fixed
Susepolkitopenstack cloud 80.113-5.24.1fixed
Susepolkitopenstack cloud 90.113-5.24.1fixed
Susepolkitopenstack cloud crowbar 80.113-5.24.1fixed
Susepolkitopenstack cloud crowbar 90.113-5.24.1fixed
Susepolkitlinux enterprise server for sap applications 12 sp30.113-5.24.1fixed
Susepolkitlinux enterprise server for sap applications 12 sp40.113-5.24.1fixed
Susepolkitlinux enterprise software development kit 12 sp50.113-5.24.1fixed
Susepolkitlinux enterprise server 12 sp2-bcl0.113-5.24.1fixed
Susepolkitlinux enterprise server 12 sp3-ltss0.113-5.24.1fixed
Susepolkitlinux enterprise server 12 sp3-bcl0.113-5.24.1fixed
Susepolkitlinux enterprise server 12 sp4-ltss0.113-5.24.1fixed
Susepolkitlinux enterprise server 12 sp50.113-5.24.1fixed
Susepolkitlinux enterprise server for sap applications 12 sp50.113-5.24.1fixed
Susepolkitlinux enterprise workstation extension 12 sp50.113-5.24.1fixed
Opensusepolkitleap 15.30.116-3.6.1fixed
Opensusepolkittumbleweed0.120-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpolicykit-1sourcesid0.105-31.1not yet assignedNot reportedNot reported
Debianpolicykit-1sourceforky0.105-31.1not yet assignedNot reportedNot reported
Debianpolicykit-1sourcetrixie0.105-31.1not yet assignedNot reportedNot reported
Debianpolicykit-1sourcebookworm0.105-31.1not yet assignedNot reportedNot reported
CpepolkitcpeNot reported121Not reportedNVD-CVE-2021-4034Not reported
Ubuntupolicykit-1debpro0.105-14.1ubuntu0.5+esm1Not reportedUSN-5252-2Not reported
Ubuntupolicykit-1debpro0.105-14.1ubuntu0.5+esm1Not reportedUBUNTU-CVE-2021-4034Not reported
Ubuntupolicykit-1deb18.040.105-20ubuntu0.18.04.6Not reportedUBUNTU-CVE-2021-4034Not reported
Ubuntupolicykit-1deb20.040.105-26ubuntu1.2Not reportedUBUNTU-CVE-2021-4034Not reported
Ubuntupolicykit-1deb22.040.105-31ubuntu1Not reportedUBUNTU-CVE-2021-4034Not reported
Ubuntupolicykit-1deb18.040.105-20ubuntu0.18.04.6Not reportedUSN-5252-1Not reported
Ubuntupolicykit-1deb20.040.105-26ubuntu1.2Not reportedUSN-5252-1Not reported
Susepolkitrpmlinux enterprise module for basesystem 15 sp30.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15 sp2-espos0.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15 sp2-ltss0.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise server 15 sp2-bcl0.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise server 15 sp2-ltss0.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 15 sp20.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmmanager proxy 4.10.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmmanager retail branch server 4.10.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmmanager server 4.10.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise micro 5.00.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise micro 5.10.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmenterprise storage 70.116-3.6.1Not reportedSUSE-SU-2022:0190-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15-espos0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15-ltss0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15 sp1-espos0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise high performance computing 15 sp1-ltss0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise server 15-ltss0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise server 15 sp1-bcl0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise server 15 sp1-ltss0.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 150.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 15 sp10.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmenterprise storage 60.114-3.15.1Not reportedSUSE-SU-2022:0191-1Not reported
Susepolkitrpmhpe helion openstack 80.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmopenstack cloud 80.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmopenstack cloud 90.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmopenstack cloud crowbar 80.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmopenstack cloud crowbar 90.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 12 sp30.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 12 sp40.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise software development kit 12 sp50.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server 12 sp2-bcl0.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server 12 sp3-ltss0.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server 12 sp3-bcl0.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server 12 sp4-ltss0.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server 12 sp50.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise server for sap applications 12 sp50.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Susepolkitrpmlinux enterprise workstation extension 12 sp50.113-5.24.1Not reportedSUSE-SU-2022:0189-1Not reported
Opensusepolkitrpmleap 15.30.116-3.6.1Not reportedOPENSUSE-SU-2022:0190-1Not reported
Opensusepolkitrpmtumbleweed0.120-2.1Not reportedOPENSUSE-SU-2024:11780-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • [pkexec]Unknown

    Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • [polkit-devel]Unknown

    Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • [polkit-doc]Unknown

    Source package: [polkit]

    Details (1)
    • 127-7.2 · noarch · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

  • Source package: [polkit]

    Details (1)
    • 127-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.120-2.1

      Version impact unknown

      dsa · polkit · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • [pkexec]Fixed

    Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · all · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · all · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • [polkitd]Fixed

    Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

  • Source package: [policykit-1]

    Details (2)
    • 122-3 · amd64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

    • 122-3 · arm64 · bookworm

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · bookworm; dsa · policykit-1 · debian · 12

[Debian 13 (Trixie)]

  • Source package: [policykit-1]

    Details (2)
    • 126-2 · amd64 · trixie

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · 13

    • 126-2 · arm64 · trixie

      Fixed · Fixed: 0.105-31.1

      dsa · policykit-1 · debian · 13

Next results

Observed:

References