PT-2016-4871 · Canonical · Ubuntu-Core-Launcher+1

Zyga + 1 · Published 2016-04-29 · Updated 2016-05-19 · CVE-2016-1580

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ubuntu-core-launcher versions prior to 1.0.27.1

Description The issue is related to the setup snappy os mounts function, which improperly determines the mount point of bind mounts when using snaps. This could potentially allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."

Recommendations For versions prior to 1.0.27.1, update to version 1.0.27.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of snaps with names starting with "ubuntu-core" to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-1580

USN-2956-1

Affected Products

Ubuntu

Ubuntu-Core-Launcher

References · 10

• http://ubuntu.com/usn/USN-2956-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1580 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1580 · Security Note
• https://ubuntu.com/security/CVE-2016-1580 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2956-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2956-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1580 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1580 · Security Note
• https://code.launchpad.net/~mvo/ubuntu-core-launcher/snappy-on-ubuntu/+merge/278938 · Note
• https://bugs.launchpad.net/ubuntu/+source/ubuntu-core-launcher/+bug/1576699 · Note