PT-2019-2889 · Flatpak+3 · Flatpak+3

Publicado 2019-03-22 · Atualizado 2024-06-15 · CVE-2019-10063

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Crítica

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Flatpak versions 0.8.1 through 1.0.7 Flatpak versions 1.1.x through 1.2.3 Flatpak versions 1.3.x through 1.3.0

Description The issue is related to insufficient input validation in the seccomp component of Flatpak, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code. The seccomp filter used to prevent sandboxed apps from using the TIOCSTI ioctl can be bypassed on 64-bit platforms by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits.

Recommendations For Flatpak versions 0.8.1 through 1.0.7, update to version 1.0.8 or later. For Flatpak versions 1.1.x through 1.2.3, update to version 1.2.4 or later. For Flatpak versions 1.3.x through 1.3.0, update to version 1.3.1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-1597

BDU:2019-02858

CESA-2019_1024

CESA-2019_1143

CVE-2019-10063

OESA-2021-1380

OPENSUSE-SU-2024:10762-1

RHSA-2019:1024

RHSA-2019:1143

RHSA-2019_1024

RHSA-2019_1143

Produtos afetados

Alt Linux

Centos

Flatpak

Red Hat

Referências · 23

• https://github.com/flatpak/flatpak/issues/2782 · Correção
• https://github.com/flatpak/flatpak/commit/a9107feeb4b8275b78965b36bf21b92d5724699e · Nota
• https://osv.dev/vulnerability/CVE-2019-10063 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02858 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2019:1024 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2019-1024.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:1143 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-21261 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10063 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-5226 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10063 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2019-1143.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-10063 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2019-10063?extIdCarryOver=true&sc_cid=701f2000001OH6kAAG · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1380 · Nota