CVE-2020-16123

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCMCREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited ...

CVE-2020-16123 Bypass of snapd pulseaudio restrictions

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCMCREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited ...

CVE-2020-16123

The CVE-2020-16123 entry describes an Ubuntu-specific patch to PulseAudio that introduced a race condition in the snap policy module. If SCM_CREDENTIALS were missing, a snap-connected client could be treated as not from a snap, allowing it to connect to PulseAudio with insufficient confinement. T...