boro03/cve-2021-4034Academic study project analyzing CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, including vulnerability analysis, exploit code, and documentation.
This repository contains the materials, code examples, and documentation for the study project within the elective module Applied IT Security about the security vulnerability CVE-2021-4034, also known as PwnKit.
This study project within the elective module Applied IT Security addresses the vulnerability CVE-2021-4034, which was published in January 2022. Affected is pkexec, a SUID-root program of the polkit component, which is installed by default on almost all common Linux distributions. It is an LPE (Local Privilege Escalation), through which an unprivileged local user can gain full root privileges. The vulnerability has existed since the introduction of pkexec in 2009. Its high criticality arises from the widespread distribution of polkit as well as the use of a privileged SUID binary.
