Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfj4-x686-g8vv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

EPSS

Процентиль: 24%
0.0008
Низкий

7.8 High

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 5 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 4.7
redhat
больше 5 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 8.2
nvd
больше 5 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

CVSS3: 8.2
debian
больше 5 лет назад

PackageKit's apt backend mistakenly treated all local debs as trusted. ...

CVSS3: 4
fstec
больше 5 лет назад

Уязвимость пакетного менеджера PackageKit, связанная с ошибками управления привилегиями, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 24%
0.0008
Низкий

7.8 High

CVSS3

Дефекты

CWE-345