CVE-2021-4115CWE-400

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion

published February 21, 2022

CVSS
—
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00525 · 43.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-02-21T00:00Z
EPSS history
Timeline
  • 21 FEB 00:00Z
    There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion
    cvelistv5