cbcvebase.
CVE-2018-6560
published 2018-02-02

CVE-2018-6560: In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the…

high8.8CVSS 3.0
AVLACLPRLUINSCCHIHAH
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianflatpak< flatpak 0.10.3-1 (bookworm)flatpak 0.10.3-1 (bookworm)
flatpakflatpak< 0.8.90.8.9
flatpakflatpak>= 0 < 0.10.3-10.10.3-1
flatpakflatpak>= 0 < 0.10.3-10.10.3-1
flatpakflatpak>= 0 < 0.10.3-10.10.3-1
flatpakflatpak>= 0 < 0.10.3-10.10.3-1
flatpakflatpak>= 0.10.0 < 0.10.30.10.3
flatpakflatpak0.9.1 – 0.9.99
redhatenterprise_linux_desktop
redhatenterprise_linux_server
redhatenterprise_linux_server_aus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_eus
redhatenterprise_linux_server_tus
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
osv8.8HIGH