CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Source

Associated Vulnerability

Description

pkexec (Polkit) exploit of Privilege Escalation vulnerability CVE-2021-4034

Readme

# CVE-2021-4034

The [Polkit](https://en.wikipedia.org/wiki/Polkit) Privilege Escalation exploit. Dockerized for the sake of reproducibility.

## Run docker

```shell
docker build -t cve20214034 .
docker run -it --rm cve20214034
```

## Run the exploit

```shell
whoami # user
./gain-root.sh
whoami # root
```

## References

- The original advisory: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
- The exploit used for inspiration: https://github.com/berdav/CVE-2021-4034
- Another exploit used for inspiration:https://github.com/ryaagard/CVE-2021-4034

File Snapshot

 [4.0K]  /data/pocs/174929613627972a56f40e91bcde718070eca49c
├── [ 750]  Dockerfile
├── [ 186]  evil-lib.c
├── [1.2K]  gain-root.sh
├── [ 282]  pkexec-wrapper.c
└── [ 567]  README.md

0 directories, 5 files

Remarks