flatpak vulnerabilities (Mageia)
20 vulnerabilities.
-
flatpakMageia Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group 5.7 Medium -
flatpakMageia Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc 7.1 High -
flatpakMageia Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files 3.6 Low -
flatpakMageia Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 3.9 Low -
flatpakMageia Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 3.2 Low -
flatpakMageia Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin 7.1 High -
flatpakMageia Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream 7.2 High -
flatpakMageia In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to... 7.4 High -
flatpakMageia Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpakMageia Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpakMageia Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpakMageia Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpakMageia Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpakMageia TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpakMageia flatpak-builder can access files outside the build directory. 7.7 High -
flatpakMageia Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpakMageia Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpakMageia Sandbox escape via special tokens in .desktop file 7.1 High -
flatpakMageia Flatpak sandbox escape via spawn portal 7.3 High -
flatpakMageia In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3,... 8.8 High