cve/2021/CVE-2021-4115.md

CVE-2021-4115

Description

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

POC

Reference

• http://packetstormsecurity.com/files/172849/polkit-File-Descriptor-Exhaustion.html
• https://gitlab.freedesktop.org/polkit/polkit/-/issues/141
• https://www.oracle.com/security-alerts/cpujul2022.html

Github

No PoCs found on GitHub currently.