PT-2021-3362 · Unknown+9 · Dbus-Daemon+9

Kevin Backhouse · Published 2021-06-03 · Updated 2026-04-21 · CVE-2021-3560

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Polkit versions prior to 0.119

Description It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this issue is to data confidentiality and integrity as well as system availability. The polkit system bus name get creds sync() function of the dbus-daemon library is associated with insufficient access control, allowing an attacker to elevate their privileges.

Recommendations Polkit version prior to 0.119: Update to Polkit version 0.119 or later to resolve the issue.

Exploit

Fix

LPE

Improper Check for Exceptional Conditions

Incorrect Authorization

Weakness Enumeration

CWE-754

CWE-863

Related Identifiers

ALT-PU-2021-1924

ALT-PU-2021-1997

ALT-PU-2021-2854

BDU:2021-03207

CESA-2021_2238

CVE-2021-3560

ELSA-2021-2238

MGASA-2021-0244

OESA-2021-1230

OPENSUSE-SU-2021:0838-1

OPENSUSE-SU-2021:1843-1

OPENSUSE-SU-2021_0838-1

OPENSUSE-SU-2021_1843-1

OPENSUSE-SU-2024:11180-1

RHSA-2021:2236

RHSA-2021:2237

RHSA-2021:2238

RHSA-2021:2522

RHSA-2021:2555

RHSA-2021_2238

RLSA-2021:2238

RLSA-2021_2238

SUSE-SU-2021:1842-1

SUSE-SU-2021:1843-1

SUSE-SU-2021:1844-1

SUSE-SU-2021_1842-1

SUSE-SU-2021_1843-1

SUSE-SU-2021_1844-1

USN-4980-1

Affected Products

Alt Linux

Centos

Linuxmint

Polkit

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Dbus-Daemon

References · 102

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/polkit_dbus_auth_bypass.rb · Exploit
• 🔥 https://github.com/Almorabea/Polkit-exploit · Exploit
• 🔥 https://github.com/secnigma/CVE-2021-3560-Polkit-Privilege-Esclation · Exploit
• 🔥 https://github.com/RicterZ/CVE-2021-3560-Authentication-Agent · Exploit
• 🔥 https://github.com/swapravo/polkadots · Exploit
• 🔥 https://github.com/hakivvi/CVE-2021-3560 · Exploit
• 🔥 https://github.com/WinMin/CVE-2021-3560 · Exploit
• 🔥 https://github.com/AssassinUKG/Polkit-CVE-2021-3560 · Exploit
• 🔥 https://github.com/0dayNinja/CVE-2021-3560 · Exploit
• 🔥 https://github.com/UNICORDev/exploit-CVE-2021-3560 · Exploit
• 🔥 https://github.com/chenaotian/CVE-2021-3560 · Exploit
• 🔥 https://github.com/f4T1H21/CVE-2021-3560-Polkit-DBus · Exploit
• 🔥 https://github.com/aancw/polkit-auto-exploit · Exploit
• 🔥 https://github.com/NeonWhiteRabbit/CVE-2021-3560 · Exploit
• 🔥 https://github.com/n3onhacks/CVE-2021-3560 · Exploit