446 lines
18 KiB
HTML
446 lines
18 KiB
HTML
<!DOCTYPE html><html lang="zh-Hant" theme-color="default" theme-mode=""><head>
|
||
<meta charset="UTF-8">
|
||
<title>Linux Polkit 權限提升漏洞預警 - JSKCloud</title>
|
||
<meta name="keywords" content="幫助文檔">
|
||
<meta name="description" content="我們的幫助文檔提供了豐富的資料和資源，包括產品手冊、技術文檔等。您可以輕鬆地找到所需的信息，幫助您更好地瞭解我們的產品和服務。我們不斷更新和完善文檔，確保您始終能夠獲得最新的信息。">
|
||
|
||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<meta http-equiv="Content-Language" content="zh-hk">
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/92c1df3730f31c-iconfont.css">
|
||
<link rel="stylesheet" href="../../assets/7bd641cba5f6a0-reset.css">
|
||
<link rel="stylesheet" href="../../assets/478794f28834cd-style.css">
|
||
<link rel="stylesheet" href="../../assets/e5adc0b1fcadda-theme.css">
|
||
<link rel="stylesheet" href="../../assets/054352c1c64ab4-common.css">
|
||
<link rel="stylesheet" href="../../assets/51c94e2cd9af75-animate.css">
|
||
<script src="../../assets/dea655e39abf18-jquery-3.5.1.min.js"></script>
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/43319114264162-bootstrap.min.css">
|
||
<script src="../../assets/b7c64cb3919aba-bootstrap.min.js"></script>
|
||
|
||
<link rel="stylesheet" href="../../assets/c7ac28884e5076-swiper-bundle.min.css">
|
||
<script src="../../assets/130071f2a87d70-swiper-bundle.min.js"></script>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="../../assets/b828918322b016-document.css">
|
||
|
||
<style>
|
||
/* 移动端适配 */
|
||
@media (max-width: 768px) {
|
||
/* 横幅区域优化 */
|
||
.server-banner2.banner-document {
|
||
padding: 30px 0;
|
||
}
|
||
|
||
.server-banner2 .section-content {
|
||
padding: 0 15px;
|
||
}
|
||
|
||
.server-banner2 h1 {
|
||
font-size: 24px;
|
||
margin-bottom: 12px;
|
||
}
|
||
|
||
.server-banner-desc2 {
|
||
font-size: 14px;
|
||
line-height: 1.6;
|
||
margin-bottom: 25px;
|
||
}
|
||
|
||
/* 搜索框适配 */
|
||
.input-search {
|
||
width: 100%;
|
||
flex-direction: column;
|
||
}
|
||
|
||
#document-input {
|
||
width: 100% !important;
|
||
margin-bottom: 10px;
|
||
height: 44px !important;
|
||
}
|
||
|
||
.search-btn {
|
||
width: 100% !important;
|
||
/* height: 44px !important;
|
||
line-height: 44px !important; */
|
||
text-align: center;
|
||
}
|
||
|
||
/* 文档列表适配 */
|
||
.docement-list {
|
||
margin: 0;
|
||
flex-direction: column;
|
||
}
|
||
|
||
.docement-list .document-box {
|
||
width: 100%;
|
||
min-height: auto;
|
||
margin: 10px 0;
|
||
padding: 20px;
|
||
box-sizing: border-box;
|
||
}
|
||
|
||
.document-box .document-header {
|
||
padding-bottom: 15px;
|
||
}
|
||
|
||
.document-box a {
|
||
font-size: 14px;
|
||
line-height: 1.6;
|
||
height: auto;
|
||
}
|
||
|
||
/* 隐藏桌面端导航 */
|
||
.page .nav-left {
|
||
display: none;
|
||
}
|
||
|
||
.page .nav-right,
|
||
.page .content-page {
|
||
padding-left: 0;
|
||
left: 0;
|
||
}
|
||
|
||
/* 内容区域优化 */
|
||
.page .page-content {
|
||
padding: 20px 15px;
|
||
margin-left: 0;
|
||
height: auto;
|
||
}
|
||
|
||
.document-cont {
|
||
padding: 20px 0 !important;
|
||
}
|
||
|
||
/* 文档详情适配 */
|
||
.document-details .document-view-item .document-view-cont {
|
||
padding: 15px;
|
||
}
|
||
|
||
.document-details .document-view-item .document-view-cont a {
|
||
width: 100%;
|
||
padding-right: 0;
|
||
}
|
||
}
|
||
|
||
/* 小屏幕优化 (≤480px) */
|
||
@media (max-width: 480px) {
|
||
.document-box {
|
||
padding: 15px !important;
|
||
}
|
||
|
||
.document-header img {
|
||
width: 24px !important;
|
||
height: 24px !important;
|
||
}
|
||
|
||
.document-details .document-view-head {
|
||
padding-left: 15px !important;
|
||
}
|
||
|
||
.page .page-content .document-head h2 {
|
||
font-size: 20px;
|
||
}
|
||
}
|
||
</style>
|
||
<link rel="canonical" href="1.html"><link rel="alternate" hreflang="zh-Hans" href="../../zh-cn/announce/1.html"><link rel="alternate" hreflang="zh-Hant" href="1.html"><link rel="alternate" hreflang="en" href="../../en/announce/1.html"><link rel="stylesheet" href="../../assets/site.css"><link rel="stylesheet" href="../../assets/0b5e1239e3594e-css2.css"><link rel="stylesheet" href="../../assets/bc27011c64b70c-css2.css"><link rel="stylesheet" href="../../assets/0fb05ab27d6c47-css2.css"></head>
|
||
|
||
<body data-static-site="jskcloud"><header><style>
|
||
/* 语言选择器样式 */
|
||
.language-selector {
|
||
position: relative;
|
||
margin-right: 20px;
|
||
cursor: pointer;
|
||
z-index: 99999;
|
||
}
|
||
|
||
.language-selected {
|
||
display: flex;
|
||
align-items: center;
|
||
padding: 8px 12px;
|
||
border-radius: 6px;
|
||
background-color: rgba(255, 255, 255, 0.1);
|
||
transition: all 0.3s ease;
|
||
}
|
||
|
||
.language-selected:hover {
|
||
background-color: rgba(255, 255, 255, 0.2);
|
||
}
|
||
|
||
.language-flag {
|
||
margin-right: 8px;
|
||
font-size: 16px;
|
||
}
|
||
|
||
.language-code {
|
||
font-weight: 500;
|
||
margin-right: 8px;
|
||
}
|
||
|
||
.language-arrow {
|
||
transition: transform 0.3s ease;
|
||
}
|
||
|
||
.language-selector.active .language-arrow {
|
||
transform: rotate(180deg);
|
||
}
|
||
|
||
.language-dropdown {
|
||
position: absolute;
|
||
top: 100%;
|
||
/* right: 0; */
|
||
width: 140px;
|
||
background: #fff;
|
||
border-radius: 8px;
|
||
box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
|
||
opacity: 0;
|
||
visibility: hidden;
|
||
transform: translateY(10px);
|
||
transition: all 0.3s ease;
|
||
z-index: 1000;
|
||
}
|
||
|
||
.language-selector.active .language-dropdown {
|
||
opacity: 1;
|
||
visibility: visible;
|
||
transform: translateY(0);
|
||
}
|
||
|
||
.language-option {
|
||
display: flex;
|
||
align-items: center;
|
||
padding: 10px 12px;
|
||
color: #333;
|
||
transition: all 0.2s ease;
|
||
}
|
||
|
||
.language-option:hover {
|
||
background-color: #f5f5f5;
|
||
}
|
||
|
||
.language-option .language-flag {
|
||
margin-right: 10px;
|
||
}
|
||
|
||
.language-name {
|
||
font-size: 14px;
|
||
}
|
||
</style>
|
||
<div class="nav-shadow">
|
||
<div class="section-content nav-header">
|
||
<div class="nav-left">
|
||
<div class="nav-icon">
|
||
<a href="../index.html"><img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt=""></a>
|
||
</div>
|
||
<div class="nav-menu">
|
||
<div>
|
||
<a href="../index.html">
|
||
<div class="nav-item">產品中心</div>
|
||
</a>
|
||
<div class="nav-cont">
|
||
<div class="section-content">
|
||
<div class="nav-cont-menu animated slideInDown">
|
||
<div class="nav-content ">
|
||
<a href="../cloud.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">雲服務器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../dedicated.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">獨立服務器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../balance.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">負載均衡</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../box.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">BOX服務器</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div>
|
||
<a href="../index.html">
|
||
<div class="nav-item">關於我們</div>
|
||
</a>
|
||
<div class="nav-cont">
|
||
<div class="section-content">
|
||
<div class="nav-cont-menu animated slideInDown">
|
||
<div class="nav-content ">
|
||
<a href="../about.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">公司簡介</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
<a href="../contact.html">
|
||
<div class="nav-item-box">
|
||
<div class="item-box-title">
|
||
<div class="title">聯繫我們</div>
|
||
</div>
|
||
</div>
|
||
</a>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="mobile-menu-btn" id="mobileMenuBtn"></div>
|
||
</div>
|
||
<div class="nav-right">
|
||
|
||
|
||
<div class="language-selector">
|
||
<div class="language-selected">
|
||
<span class="language-flag">🌐</span>
|
||
<span class="language-code">繁體中文</span>
|
||
<svg class="language-arrow" width="10" height="6" viewBox="0 0 10 6" fill="none" xmlns="http://www.w3.org/2000/svg">
|
||
<path d="M1 1L5 5L9 1" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path>
|
||
</svg>
|
||
</div>
|
||
<div class="language-dropdown">
|
||
<a class="language-option" data-lang="en" href="../../en/announce/1.html" lang="en" hreflang="en">English</a>
|
||
<a class="language-option" data-lang="zh-cn" href="../../zh-cn/announce/1.html" lang="zh-cn" hreflang="zh-cn">简体中文</a>
|
||
<a class="language-option" data-lang="zh-hk" href="1.html" lang="zh-hk" hreflang="zh-hk" aria-current="true">繁體中文</a>
|
||
|
||
</div>
|
||
</div>
|
||
|
||
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
|
||
|
||
<div class="aside-tools">
|
||
<div class="tools-list">
|
||
<div class="tools-item">
|
||
<img src="../../assets/82c093ab92edb0-f801662fa2daa58d6b518f4642a32aed1742560323-tg.jpg" alt="">
|
||
<div class="tools-box">
|
||
<div class="tools-box-s">
|
||
<h5>聯繫客服</h5>
|
||
<p><a target="_blank" href="https://t.me/JSK215" rel="noopener noreferrer"> 客服 - 覺覺</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKdang" rel="noopener noreferrer"> 客服 - 叮噹</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKyoumi" rel="noopener noreferrer"> 客服 - 優米</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK_666" rel="noopener noreferrer"> 客服 - 千禧</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK116" rel="noopener noreferrer"> 客服 - 熊貓</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK0003" rel="noopener noreferrer"> 客服 - 鬧鬧</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSK88801" rel="noopener noreferrer"> 客服 - 詩詩</a></p>
|
||
<p><a target="_blank" href="https://t.me/JSKyaoyao" rel="noopener noreferrer"> 客服 - 夢瑤</a></p> </div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</header><main class="static-main"><article class="static-article"><h1>Linux Polkit 權限提升漏洞預警</h1><div class="static-date">2023-03-31</div>
|
||
<div data-version="3.0.0" data-hash="d7d23fa8f75af898d4e5702249ad68e8"> </div>
|
||
<div>
|
||
<div class="document">
|
||
<div class="section">
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">尊敬的主題雲用户：</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px; text-indent: 21pt;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">您好！國外安全研究團隊披露在polkit的pkexec程序中存在一處權限提升漏洞。（CVE-2021-4034，亦稱PwnKit）。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞評級】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">高風險</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【漏洞描述】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">CVE-2021-4034</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">攻擊者可以通過在其默認配置中利用此漏洞實現用任何非特權用户獲取易受攻擊主機的完全root權限，目前漏洞POC/EXP已公開，風險較高。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【影響範圍】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">該漏洞影響2009年5月至今所有polkit版本。由於polkit是系統的預裝工具，所有存在polkit的linux系統均受影響。</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">【修復方案】</span></p>
|
||
<p class="paragraph text-align-type-justify" style="margin: 0pt 0pt 7.8pt; text-align: justify; font-family: 等线; font-size: 12pt; line-height: 24px;"><span style="font-size: 10.5pt; font-family: 宋体; letter-spacing: 0pt; vertical-align: baseline;" data-font-family="宋体">目前RedHat、Ubuntu、Debian、SUSE等各大Linux廠商均已發佈補丁版本修復了該漏洞，請受影響的用户升級到安全版本。</span></p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<a class="static-back" href="../announce.html">返回列表</a></article></main><footer class="section footer index">
|
||
|
||
<div class="section-content section-p">
|
||
|
||
|
||
<div class="footer-content">
|
||
<div class="footer-nav">
|
||
<div class="footer-logo">
|
||
<img src="../../assets/f47e84e194e9c4-c47cdbdba8c01d82740fc430f77aaa6f1792437534-222.png" alt="">
|
||
</div>
|
||
<div class="footer-nav-left">
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">產品中心</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../cloud.html">雲服務器</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../dedicated.html">獨立服務器</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../balance.html">負載均衡</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../box.html">Box服務器</a></div>
|
||
</div>
|
||
</div>
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">技術支持</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../document.html">技術文檔</a></div>
|
||
</div>
|
||
</div>
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">關於我們</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item"><a class="link-hover" href="../about.html">公司簡介</a></div>
|
||
<div class="footer-nav-item"><a class="link-hover" href="../contact.html">聯繫我們</a></div>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
|
||
<div class="footer-nav-right">
|
||
<div class="footer-nav-box">
|
||
<div class="footer-nav-head">聯繫我們</div>
|
||
<div class="footer-nav-cont">
|
||
<div class="footer-nav-item">JSKCloud.net</div>
|
||
<div class="footer-nav-item mt-20">+1 971-555-4977</div>
|
||
<div class="footer-nav-item"> </div>
|
||
</div>
|
||
<div class="qr-code"><img src="../../assets/d3e969edecf0fd-eac95f7d7c0bee0ac3a76bca7132331742548017-photo_2025-03-21_17-06-47.jpg" alt=""></div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
<div class="footer-record">
|
||
<div class="left-info">
|
||
<a href="../index.html" rel="nofollow"> Copyright@2017-2024 JSK cloud TECHNOLOGY PTE. LTD 版權所有 All Rights Reserved</a>
|
||
<a href="../index.html" rel="nofollow"> </a>
|
||
<span> </span>
|
||
</div>
|
||
<span> </span>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</footer><script src="../../assets/site.js" defer=""></script></body></html> |