CVE-2018-6560 In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in th...
HighCVSS 8.8
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/flatpak(Debian:12) | < 0.10.3-1 | 0.10.3-1 |
| debian/flatpak(Debian:13) | < 0.10.3-1 | 0.10.3-1 |
| debian/flatpak(Debian:14) | < 0.10.3-1 | 0.10.3-1 |
| flatpak | < 0.8.9 | 0.8.9 |
| flatpak | >= 0.9.1, <= 0.9.99 | No fix listed |
| flatpak | >= 0.10.0, < 0.10.3 | 0.10.3 |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-6560 vendor-advisory
- RHSA-2018:2766 third-party-advisory vendor-advisory
- github.com patch vendor-advisory
- github.com release-notes
- github.com release-notes
- bugs.debian.org issue-tracking