CVE-2019-8308
12.02.2019, 23:29
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| flatpak | flatpak | 𝑥 < 1.0.7 |
| flatpak | flatpak | 1.1.0 ≤ 𝑥 ≤ 1.1.3 |
| flatpak | flatpak | 1.2.0 ≤ 𝑥 ≤ 1.2.3 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_eus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_workstation | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References