438 lines
18 KiB
HTML
438 lines
18 KiB
HTML
<!DOCTYPE html><html lang="zh-Hans" theme-color="default" theme-mode=""><head>
|
||
<meta charset="UTF-8">
|
||
<title>Linux Polkit 权限提升漏洞预警 - JSKCloud</title>
|
||
<meta name="keywords" content="帮助文档">
|
||
<meta name="description" content="我们的帮助文档提供了丰富的资料和资源，包括产品手册、技术文档等。您可以轻松地找到所需的信息，帮助您更好地了解我们的产品和服务。我们不断更新和完善文档，确保您始终能够获得最新的信息。">
|
||
|
||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<meta http-equiv="Content-Language" content="zh-cn">
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/92c1df3730f31c-iconfont.css">
|
||
<link rel="stylesheet" href="../../assets/7bd641cba5f6a0-reset.css">
|
||
<link rel="stylesheet" href="../../assets/478794f28834cd-style.css">
|
||
<link rel="stylesheet" href="../../assets/e5adc0b1fcadda-theme.css">
|
||
<link rel="stylesheet" href="../../assets/054352c1c64ab4-common.css">
|
||
<link rel="stylesheet" href="../../assets/51c94e2cd9af75-animate.css">
|
||
<script src="../../assets/dea655e39abf18-jquery-3.5.1.min.js"></script>
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/43319114264162-bootstrap.min.css">
|
||
<script src="../../assets/b7c64cb3919aba-bootstrap.min.js"></script>
|
||
|
||
<link rel="stylesheet" href="../../assets/c7ac28884e5076-swiper-bundle.min.css">
|
||
<script src="../../assets/130071f2a87d70-swiper-bundle.min.js"></script>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/b828918322b016-document.css">
|
||
|
||
<style>
|
||
/* 移动端适配 */
|
||
@media (max-width: 768px) {
|
||
/* 横幅区域优化 */
|
||
.server-banner2.banner-document {
|
||
padding: 30px 0;
|
||
}
|
||
|
||
.server-banner2 .section-content {
|
||
padding: 0 15px;
|
||
}
|
||
|
||
.server-banner2 h1 {
|
||
font-size: 24px;
|
||
margin-bottom: 12px;
|
||
}
|
||
|
||
.server-banner-desc2 {
|
||
font-size: 14px;
|
||
line-height: 1.6;
|
||
margin-bottom: 25px;
|
||
}
|
||
|
||
/* 搜索框适配 */
|
||
.input-search {
|
||
width: 100%;
|
||
flex-direction: column;
|
||
}
|
||
|
||
#document-input {
|
||
width: 100% !important;
|
||
margin-bottom: 10px;
|
||
height: 44px !important;
|
||
}
|
||
|
||
.search-btn {
|
||
width: 100% !important;
|
||
/* height: 44px !important;
|
||
line-height: 44px !important; */
|
||
text-align: center;
|
||
}
|
||
|
||
/* 文档列表适配 */
|
||
.docement-list {
|
||
margin: 0;
|
||
flex-direction: column;
|
||
}
|
||
|
||
.docement-list .document-box {
|
||
width: 100%;
|
||
min-height: auto;
|
||
margin: 10px 0;
|
||
padding: 20px;
|
||
box-sizing: border-box;
|
||
}
|
||
|
||
.document-box .document-header {
|
||
padding-bottom: 15px;
|
||
}
|
||
|
||
.document-box a {
|
||
font-size: 14px;
|
||
line-height: 1.6;
|
||
height: auto;
|
||
}
|
||
|
||
/* 隐藏桌面端导航 */
|
||
.page .nav-left {
|
||
display: none;
|
||
}
|
||
|
||
.page .nav-right,
|
||
.page .content-page {
|
||
padding-left: 0;
|
||
left: 0;
|
||
}
|
||
|
||
/* 内容区域优化 */
|
||
.page .page-content {
|
||
padding: 20px 15px;
|
||
margin-left: 0;
|
||
height: auto;
|
||
}
|
||
|
||
.document-cont {
|
||
padding: 20px 0 !important;
|
||
}
|
||
|
||
/* 文档详情适配 */
|
||
.document-details .document-view-item .document-view-cont {
|
||
padding: 15px;
|
||
}
|
||
|
||
.document-details .document-view-item .document-view-cont a {
|
||
width: 100%;
|
||
padding-right: 0;
|
||
}
|
||
}
|
||
|
||
/* 小屏幕优化 (≤480px) */
|
||
@media (max-width: 480px) {
|
||
.document-box {
|
||
padding: 15px !important;
|
||
}
|
||
|
||
.document-header img {
|
||
width: 24px !important;
|
||
height: 24px !important;
|
||
}
|
||
|
||
.document-details .document-view-head {
|
||
padding-left: 15px !important;
|
||
}
|
||
|
||
.page .page-content .document-head h2 {
|
||
font-size: 20px;
|
||
}
|
||
}
|
||
</style>
|
||
<link rel="canonical" href="1.html"><link rel="alternate" hreflang="zh-Hans" href="1.html"><link rel="alternate" hreflang="zh-Hant" href="../../zh-hk/announce/1.html"><link rel="alternate" hreflang="en" href="../../en/announce/1.html"><link rel="stylesheet" href="../../assets/site.css"><link rel="stylesheet" href="../../assets/96b2574c658cc1-css2.css"><link rel="stylesheet" href="../../assets/9ea408106ae79c-css2.css"><link rel="stylesheet" href="../../assets/95f8d834964d8a-css2.css"></head>
|
||
|
||
<body data-static-site="jskcloud"><header><style>
|
||
/* 语言选择器样式 */
|
||
.language-selector {
|
||
position: relative;
|
||
margin-right: 20px;
|
||
cursor: pointer;
|
||
z-index: 99999;
|
||
}
|
||
|
||
.language-selected {
|
||
display: flex;
|
||
align-items: center;
|
||
padding: 8px 12px;
|
||
border-radius: 6px;
|
||
background-color: rgba(255, 255, 255, 0.1);
|
||
transition: all 0.3s ease;
|
||
}
|
||
|
||
.language-selected:hover {
|
||
background-color: rgba(255, 255, 255, 0.2);
|
||
}
|
||
|
||
.language-flag {
|
||
margin-right: 8px;
|
||
font-size: 16px;
|
||
}
|
||
|
||
.language-code {
|
||
font-weight: 500;
|
||
margin-right: 8px;
|
||
}
|
||
|
||
.language-arrow {
|
||
transition: transform 0.3s ease;
|
||
}
|
||
|
||
.language-selector.active .language-arrow {
|
||
transform: rotate(180deg);
|
||
}
|
||
|
||
.language-dropdown {
|
||
position: absolute;
|
||
top: 100%;
|
||
/* right: 0; */
|
||
width: 140px;
|
||
background: #fff;
|
||
border-radius: 8px;
|
||
box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
|
||
opacity: 0;
|
||
visibility: hidden;
|
||
transform: translateY(10px);
|
||
transition: all 0.3s ease;
|
||
z-index: 1000;
|
||
}
|
||
|
||
.language-selector.active .language-dropdown {
|
||
opacity: 1;
|
||
visibility: visible;
|
||
transform: translateY(0);
|
||
}
|
||
|
||
.language-option {
|
||
display: flex;
|
||
align-items: center;
|
||
padding: 10px 12px;
|
||
color: #333;
|
||
transition: all 0.2s ease;
|
||
}
|
||
|
||
.language-option:hover {
|
||
background-color: #f5f5f5;
|
||
}
|
||
|
||
.language-option .language-flag {
|
||
margin-right: 10px;
|
||
}
|
||
|
||
.language-name {
|
||
font-size: 14px;
|
||
}
|
||
</style>
|
||
<div class="nav-shadow">
|
||
<div class="section-content nav-header">
|
||
<div class="nav-left">
|
||
<div class="nav-icon">
|
||
<a href="../index.html"><img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt=""></a>
|
||
</div>
|
||
<div class="nav-menu">
|
||
<div>
|
||
<a href="../index.html">
|
||
<div class="nav-item">产品中心</div>
|
||
</a>
|
||
<div class="nav-cont">
|
||
<div class="section-content">
|
||
<div class="nav-cont-menu animated slideInDown">
|
||
<div class="nav-content ">
|
||
<a href="../cloud.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">云服务器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../dedicated.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">独立服务器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../balance.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">负载均衡</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../box.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">BOX服务器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div>
|
||
<a href="../index.html">
|
||
<div class="nav-item">关于我们</div>
|
||
</a>
|
||
<div class="nav-cont">
|
||
<div class="section-content">
|
||
<div class="nav-cont-menu animated slideInDown">
|
||
<div class="nav-content ">
|
||
<a href="../about.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">公司简介</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../contact.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">联系我们</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="mobile-menu-btn" id="mobileMenuBtn"></div>
|
||
</div>
|
||
<div class="nav-right">
|
||
|
||
|
||
<div class="language-selector">
|
||
<div class="language-selected">
|
||
<span class="language-flag">🌐</span>
|
||
<span class="language-code">简体中文</span>
|
||
<svg class="language-arrow" width="10" height="6" viewBox="0 0 10 6" fill="none" xmlns="http://www.w3.org/2000/svg">
|
||
<path d="M1 1L5 5L9 1" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path>
|
||
</svg>
|
||
</div>
|
||
<div class="language-dropdown">
|
||
<a class="language-option" data-lang="en" href="../../en/announce/1.html" lang="en" hreflang="en">English</a>
|
||
<a class="language-option" data-lang="zh-cn" href="1.html" lang="zh-cn" hreflang="zh-cn" aria-current="true">简体中文</a>
|
||
<a class="language-option" data-lang="zh-hk" href="../../zh-hk/announce/1.html" lang="zh-hk" hreflang="zh-hk">繁體中文</a>
|
||
|
||
</div>
|
||
</div>
|
||
|
||
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
|
||
|
||
<div class="aside-tools">
|
||
<div class="tools-list">
|
||
<div class="tools-item">
|
||
<img src="../../assets/82c093ab92edb0-f801662fa2daa58d6b518f4642a32aed1742560323-tg.jpg" alt="">
|
||
<div class="tools-box">
|
||
<div class="tools-box-s">
|
||
<h5>联系客服</h5>
|
||
<p><a target="_blank" href="https://t.me/JSK215" rel="noopener noreferrer"> 客服 - 觉觉</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKdang" rel="noopener noreferrer"> 客服 - 叮当</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKyoumi" rel="noopener noreferrer"> 客服 - 优米</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK_666" rel="noopener noreferrer"> 客服 - 千禧</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK116" rel="noopener noreferrer"> 客服 - 熊猫</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK0003" rel="noopener noreferrer"> 客服 - 闹闹</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK88801" rel="noopener noreferrer"> 客服 - 诗诗</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKyaoyao" rel="noopener noreferrer"> 客服 - 梦瑶</a></p> </div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</header><main class="static-main"><article class="static-article"><h1>Linux Polkit 权限提升漏洞预警</h1><div class="static-date">2023-03-31</div>
|
||
<div data-version="3.0.0" data-hash="d7d23fa8f75af898d4e5702249ad68e8"> </div>
|
||
<div>
|
||
<div class="document">
|
||
<div class="section">
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">尊敬的主题云用户：</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px; text-indent: 21pt;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">您好！国外安全研究团队披露在polkit的pkexec程序中存在一处权限提升漏洞。（CVE-2021-4034，亦称PwnKit）。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞评级】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">高风险</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞描述】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">CVE-2021-4034</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">攻击者可以通过在其默认配置中利用此漏洞实现用任何非特权用户获取易受攻击主机的完全root权限，目前漏洞POC/EXP已公开，风险较高。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【影响范围】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">该漏洞影响2009年5月至今所有polkit版本。由于polkit是系统的预装工具，所有存在polkit的linux系统均受影响。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【修复方案】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">目前RedHat、Ubuntu、Debian、SUSE等各大Linux厂商均已发布补丁版本修复了该漏洞，请受影响的用户升级到安全版本。</span></p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<a class="static-back" href="../announce.html">返回列表</a></article></main><footer class="section footer index">
|
||
|
||
<div class="section-content section-p">
|
||
|
||
|
||
<div class="footer-content">
|
||
<div class="footer-nav">
|
||
<div class="footer-logo">
|
||
<img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt="">
|
||
</div>
|
||
<div class="footer-nav-left">
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">产品中心</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../cloud.html">云服务器</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../dedicated.html">独立服务器</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../balance.html">负载均衡</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../box.html">Box服务器</a></div>
|
||
</div>
|
||
</div>
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">技术支持</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../document.html">技术文档</a></div>
|
||
</div>
|
||
</div>
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">关于我们</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../about.html">公司简介</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../contact.html">联系我们</a></div>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
|
||
<div class="footer-nav-right">
|
||
<div class="footer-nav-box"><div class="footer-nav-head">联系我们</div><div class="footer-nav-cont"><div class="footer-nav-item">JSKCloud.net</div><div class="footer-nav-item mt-20"><a class="link-hover" href="https://t.me/JSKCDN999" target="_blank" rel="noopener noreferrer">Telegram @JSKCDN999</a></div></div></div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
<div class="footer-record">
|
||
<div class="left-info">
|
||
<a href="../index.html" rel="nofollow"> Copyright@2017-2024 JSK cloud TECHNOLOGY PTE. LTD 版权所有 All Rights Reserved</a>
|
||
<a href="../index.html" rel="nofollow"> </a>
|
||
<span> </span>
|
||
</div>
|
||
<span> </span>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</footer><script src="../../assets/site.js" defer=""></script></body></html> |