Описание
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.7.0 (исключая)
Одновременно
cpe:2.3:a:canonical:multipass:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00047
Низкий
8.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-73
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 4 лет назад
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
CVSS3: 8.8
github
больше 3 лет назад
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
EPSS
Процентиль: 15%
0.00047
Низкий
8.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-73
NVD-CWE-noinfo