Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfj4-x686-g8vv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

EPSS

Процентиль: 27%
0.00339
Низкий

7.8 High

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 8.2
ubuntu
почти 6 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 4.7
redhat
почти 6 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 8.2
nvd
почти 6 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 8.2
debian
почти 6 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. ...

CVSS3: 4
fstec
около 6 лет назад

Уязвимость пакетного менеджера PackageKit, связанная с ошибками управления привилегиями, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 27%
0.00339
Низкий

7.8 High

CVSS3

Дефекты

CWE-345