Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-0987

Опубликовано: 28 июн. 2022
Источник: debian

Описание

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
packagekitunfixedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=2064315

  • Negligible security impact

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
redhat
почти 4 года назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
nvd
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
github
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 5.5
fstec
почти 4 года назад

Уязвимость интерфейса транзакций пакетного менеджера PackageKit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации