PT-2019-2889 · Flatpak+3 · Flatpak+3

Published 2019-03-22 · Updated 2024-06-15 · CVE-2019-10063

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Critical

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Flatpak versions 0.8.1 through 1.0.7 Flatpak versions 1.1.x through 1.2.3 Flatpak versions 1.3.x through 1.3.0

Description The issue is related to insufficient input validation in the seccomp component of Flatpak, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code. The seccomp filter used to prevent sandboxed apps from using the TIOCSTI ioctl can be bypassed on 64-bit platforms by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits.

Recommendations For Flatpak versions 0.8.1 through 1.0.7, update to version 1.0.8 or later. For Flatpak versions 1.1.x through 1.2.3, update to version 1.2.4 or later. For Flatpak versions 1.3.x through 1.3.0, update to version 1.3.1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2019-1597

BDU:2019-02858

CESA-2019_1024

CESA-2019_1143

CVE-2019-10063

OESA-2021-1380

OPENSUSE-SU-2024:10762-1

RHSA-2019:1024

RHSA-2019:1143

RHSA-2019_1024

RHSA-2019_1143

Affected Products

Alt Linux

Centos

Flatpak

Red Hat

References · 23

• https://github.com/flatpak/flatpak/issues/2782 · Patch
• https://osv.dev/vulnerability/CVE-2019-10063 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02858 · Security Note
• https://access.redhat.com/errata/RHSA-2019:1024 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-1024.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10063 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10063 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-1143.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-10063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10063 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-10063 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-10063 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1380 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10762-1 · Vendor Advisory