flatpak-devel vulnerabilities (Red Hat)
32 vulnerabilities.
-
flatpak-develRed Hat Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 7.5 High -
flatpak-develRed Hat Important: flatpak security update 7.4 High -
flatpak-develRed Hat Flatpak: flatpak: arbitrary write access as root via extra-data extraction 8.8 High -
flatpak-develRed Hat In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to... 7.4 High -
flatpak-develRed Hat Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpak-develRed Hat Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpak-develRed Hat Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpak-develRed Hat Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpak-develRed Hat Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpak-develRed Hat TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpak-develRed Hat Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpak-develRed Hat Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpak-develRed Hat Sandbox escape via special tokens in .desktop file 7.1 High -
flatpak-develRed Hat Flatpak sandbox escape via spawn portal 7.3 High -
flatpak-develRed Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
flatpak-develRed Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
flatpak-develRed Hat Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox... 9.0 Critical -
flatpak-develRed Hat Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... 8.2 High -
flatpak-develRed Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... 6.5 Medium -
flatpak-develRed Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... 6.5 Medium -
flatpak-develRed Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical -
flatpak-develRed Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... 8.8 High -
flatpak-develRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 6.5 Medium -
flatpak-develRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 7.5 High -
flatpak-develRed Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... 5.5 Medium -
flatpak-develRed Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... 8.8 High -
flatpak-develRed Hat There is a stack-based buffer over-read in calling GLib in the function... 6.5 Medium -
flatpak-develRed Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... 6.5 Medium -
flatpak-develRed Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... 6.5 Medium -
flatpak-develRed Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... 8.8 High -
flatpak-develRed Hat In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3,... 8.8 High -
flatpak-develRed Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... 8.8 High