Описание
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulnerability is fixed in 1.16.4.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.16.6-1 |
| esm-apps/bionic | ignored | changes too intrusive |
| esm-apps/focal | released | 1.6.5-0ubuntu0.5+esm1 |
| esm-apps/jammy | released | 1.12.7-1ubuntu0.1+esm1 |
| esm-apps/noble | released | 1.14.6-1ubuntu0.1+esm1 |
| esm-apps/resolute | not-affected | 1.16.6-1 |
| jammy | needed | |
| noble | needed | |
| questing | ignored | end of life, was needs-triage |
| resolute | not-affected | 1.16.6-1 |
Показывать по
10 Critical
CVSS3
Связанные уязвимости
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulnerability is fixed in 1.16.4.
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulnerability is fixed in 1.16.4.
Flatpak is a Linux application sandboxing and distribution framework. ...
Уязвимость инструмента для управления приложениями и средами Flatpak, связанная с отслеживанием символьных ссылок UNIX, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации и выполнить произвольный код
10 Critical
CVSS3