CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Description

pkexec (Polkit) exploit of Privilege Escalation vulnerability CVE-2021-4034

介绍

# CVE-2021-4034

The [Polkit](https://en.wikipedia.org/wiki/Polkit) Privilege Escalation exploit. Dockerized for the sake of reproducibility.

## Run docker

```shell
docker build -t cve20214034 .
docker run -it --rm cve20214034
```

## Run the exploit

```shell
whoami # user
./gain-root.sh
whoami # root
```

## References

- The original advisory: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- The exploit used for inspiration: https://github.com/berdav/CVE-2021-4034
- Another exploit used for inspiration:https://github.com/ryaagard/CVE-2021-4034

文件快照

备注