Lucene search

[email protected]CVE-2020-15703

HistoryOct 31, 2020 - 4:15 a.m.

CVE-2020-15703

2020-10-3104:15:10

CWE-22

[email protected]

web.nvd.nist.gov

cve

2020

15703

input validation

locale property

apt transaction

unprivileged user

symlink

error message

security vulnerability

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

3.7 Low

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an unprivileged user can check for the existence of any files on the system as root.

Affected configurations

NVD

Node

aptdaemon_projectaptdaemonMatch1.1.1bzr982-0ubuntu14.4

aptdaemon_projectaptdaemonMatch1.1.1bzr982-0ubuntu19.4

aptdaemon_projectaptdaemonMatch1.1.1bzr982-0ubuntu32.2

CPENameOperatorVersion
aptdaemon_project:aptdaemonaptdaemon project aptdaemoneq1.1.1

CPE	Name	Operator	Version
aptdaemon_project:aptdaemon	aptdaemon project aptdaemon	eq	1.1.1

CNA Affected

[
  {
    "product": "aptdaemon",
    "vendor": "Canonical",
    "versions": [
      {
        "lessThan": "1.1.1+bzr982-0ubuntu32.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.1+bzr982-0ubuntu19.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.1+bzr982-0ubuntu14.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]