Medium: flatpak

Issue Overview: It was found that flatpak's D-Bus proxy did not properly filter the access to D-Bus during the authentication protocol. A specially crafted flatpak application could use this flaw to bypass all restrictions imposed by flatpak and have full access to the D-BUS interface.CVE-2018-65...

Flatpak Security Bypass Vulnerability

Flatpak is a system for building and installing Linux desktop applications. A security vulnerability exists in the bus-proxy/flatpak-proxy.c file in Flatpak versions prior to 0.8.9, 0.9.x, and 0.10.x prior to 0.10.3. An attacker can exploit this vulnerability to bypass the sandbox with the help o...

CVE-2018-6560

It was found that flatpak's D-Bus proxy did not properly filter the access to D-Bus during the authentication protocol. A specially crafted flatpak application could use this flaw to bypass all restrictions imposed by flatpak and have full access to the D-BUS interface...