Описание
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | deferred | |
| esm-infra-legacy/xenial | deferred | |
| esm-infra/bionic | deferred | |
| esm-infra/focal | deferred | |
| esm-infra/xenial | ignored | end of ESM support, was deferred |
| focal | ignored | end of standard support, was needs-triage |
| impish | ignored | end of life |
| jammy | deferred | |
| kinetic | ignored | end of life, was needs-triage |
Показывать по
EPSS
2.1 Low
CVSS2
3.3 Low
CVSS3
Связанные уязвимости
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
A flaw was found in PackageKit in the way some of the methods exposed ...
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
Уязвимость интерфейса транзакций пакетного менеджера PackageKit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
2.1 Low
CVSS2
3.3 Low
CVSS3