Canonical aptdaemon vulnerabilities

Latest Canonical aptdaemon CVEs

Newest publication first

1. CVE-2020-27349 aptdaemon performed policykit permissions checks too late

   Published 2020-12-09

   Medium·CVSS 5.5 EPSS 0.29%

   Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.

2. CVE-2020-16128 Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties

   Published 2020-12-09

   Low·CVSS 3.8 EPSS 0.34%

   The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14...

3. CVE-2020-15703 aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property

   Published 2020-10-31

   Low·CVSS 3.3 EPSS 0.49% PoC

   There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. T...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.