flatpak vulnerabilities (openSUSE)
25 vulnerabilities.
-
flatpakopenSUSE Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group 5.7 Medium -
flatpakopenSUSE Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc 7.1 High -
flatpakopenSUSE Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files 3.6 Low -
flatpakopenSUSE Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 3.9 Low -
flatpakopenSUSE Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 3.2 Low -
flatpakopenSUSE Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin 7.1 High -
flatpakopenSUSE Xdg-dbus-proxy: xdg-dbus-proxy: filtering for broadcast messages bypasses path/interface/member checks 3.2 Low -
flatpakopenSUSE Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup 8.8 High -
flatpakopenSUSE Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpakopenSUSE Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpakopenSUSE Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpakopenSUSE Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpakopenSUSE Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpakopenSUSE TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpakopenSUSE flatpak-builder can access files outside the build directory. 7.7 High -
flatpakopenSUSE Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpakopenSUSE Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpakopenSUSE Flatpak sandbox escape via spawn portal 7.3 High -
flatpakopenSUSE An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A... 7.8 High -
flatpakopenSUSE An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32... 9.0 Critical -
flatpakopenSUSE Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox... 9.0 Critical -
flatpakopenSUSE Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... 8.2 High -
flatpakopenSUSE runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... 8.6 High -
flatpakopenSUSE When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent... 10.0 Critical -
flatpakopenSUSE Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain... 7.0 High