Lucene search
+L

7 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:59 a.m.•19 views

SUSE CVE-2020-11931

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the pulseaudio snap policy module. This issue...

3.3CVSS6.8AI score0.0033EPSS
SaveExploits0References3
Veracode
Veracode
•added 2020/12/06 2:27 a.m.•28 views

Information Disclosure

PulseAudio is vulnerable to information disclosure. A race condition can occur if SCMCREDENTIALS were missing casuing the snap policy module to fail to identify a client connection from a snap as coming from a snap , allowing the snap to connect to PulseAudio without proper confinement. This coul...

4.7CVSS1.4AI score0.00318EPSS
SaveExploits1References3Affected Software4
Cvelist
Cvelist
•added 2020/12/03 11:15 p.m.•44 views

CVE-2020-16123 Bypass of snapd pulseaudio restrictions

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCMCREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited ...

4.4CVSS4.5AI score0.00318EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2020/11/23 5:00 p.m.•39 views

CVE-2020-16123

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCMCREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited ...

4.7CVSS5.9AI score0.00318EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/11/23 12:00 a.m.•5 views

PT-2020-14759

Name of the Vulnerable Software and Affected Versions PulseAudio versions 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15 Description An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail t...

4.7CVSS0.00318EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/15 12:00 a.m.•10 views

CVE-2020-11931: Improper Access Control

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the pulseaudio snap policy module. This issue...

3.3CVSS5.4AI score0.0033EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/04/16 12:00 a.m.•3 views

PT-2020-12929

Name of the Vulnerable Software and Affected Versions pulseaudio versions 1:8.0 through 1:8.0-0ubuntu3.11 pulseaudio versions 1:11.1 through 1:11.1-1ubuntu7.6 pulseaudio versions 1:13.0 through 1:13.0-1ubuntu1.1 pulseaudio versions 1:13.99.1 through 1:13.99.1-1ubuntu3.1 Description The issue is...

3.3CVSS0.0033EPSS
SaveExploits0References11
Rows per page
Query Builder