Arbitrary Code Execution

🗓️ 26 Apr 2024 04:21:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Flatpak vulnerability to Arbitrary Code Execution through org.freedesktop.portal.Background.RequestBackgroun

Reporter	Title	Published	Views	Family All 145
GithubExploit	Exploit for Argument Injection in Flatpak	28 May 202505:07	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Flatpak affects IBM watsonx Assistant for IBM Cloud Pak for Data	15 Apr 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Flatpak affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	21 May 202514:58	–	ibm
Tenable Nessus	Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2024-611)	13 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : flatpak (ALAS-2024-2538)	15 May 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0127: flatpak (ALINUX3-SA-2024:0127)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : flatpak (ALSA-2024:3959)	19 Jun 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : flatpak (ALSA-2024:3961)	19 Jun 202400:00	–	nessus
Tenable Nessus	CentOS 7 : flatpak (RHSA-2024:3980)	25 Jul 202400:00	–	nessus
Tenable Nessus	Debian dsa-5666 : flatpak - security update	19 Apr 202400:00	–	nessus

Vulners

Node

flatpak flatpakMatch1.8.2-3debian

AND

debian debian_linuxMatch11

flatpak flatpakMatch1.11.3-2debian

AND

flatpak flatpakMatch1.8.3-2debian

AND

debian debian_linuxMatch999

flatpak flatpakMatch1.14.1-r0os

AND

flatpak flatpakMatch1.14.0-r2os

AND

flatpak flatpakMatch1.14.3-r0os

AND

flatpak flatpakMatch1.14.4-r0os

AND

alpinelinux alpine_linuxMatch3.17

flatpak flatpakMatch1.6.3-r1os

AND

flatpak flatpakMatch1.10.2-r1os

AND

flatpak flatpakMatch1.6.2-r2os

AND

flatpak flatpakMatch1.14.4-r7os

AND

flatpak flatpakMatch1.12.6-r0os

AND

flatpak flatpakMatch1.14.1-r0os

AND

flatpak flatpakMatch1.14.3-r0os

AND

flatpak flatpakMatch1.14.4-r8os

AND

flatpak flatpakMatch1.14.0-r0os

AND

flatpak flatpakMatch1.14.4-r3os

AND

flatpak flatpakMatch1.14.5-r0os

AND

flatpak flatpakMatch1.10.2-r0os

AND

flatpak flatpakMatch1.14.4-r4os

AND

flatpak flatpakMatch1.14.4-r2os

AND

flatpak flatpakMatch1.14.0-r1os

AND

flatpak flatpakMatch1.14.5-r2os

AND

flatpak flatpakMatch1.12.1-r0os

AND

flatpak flatpakMatch1.14.5-r3os

AND

flatpak flatpakMatch1.14.4-r1os

AND

flatpak flatpakMatch1.14.5-r1os

AND

flatpak flatpakMatch1.14.4-r6os

AND

flatpak flatpakMatch1.14.2-r1os

AND

flatpak flatpakMatch1.10.1-r1os

AND

flatpak flatpakMatch1.14.0-r2os

AND

flatpak flatpakMatch1.14.2-r0os

AND

flatpak flatpakMatch1.10.3-r0os

AND

flatpak flatpakMatch1.14.4-r0os

AND

flatpak flatpakMatch1.12.2-r0os

AND

flatpak flatpakMatch1.12.7-r0os

AND

flatpak flatpakMatch1.6.3-r0os

AND

flatpak flatpakMatch1.12.3-r1os

AND

flatpak flatpakMatch1.12.5-r0os

AND

alpinelinux alpine_linuxMatchedge

flatpak flatpakMatch1.14.4-r2os

AND

flatpak flatpakMatch1.14.4-r3os

AND

flatpak flatpakMatch1.14.4-r5os

AND

alpinelinux alpine_linuxMatch3.18

flatpak flatpakMatch1.14.4-r8os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-32462
github	www.github.com/flatpak/flatpak/commit/72016e3fce8fcbeab707daf4f1a02b931fcc004d
github	www.github.com/flatpak/flatpak/commit/81abe2a37d363f5099c3d0bdcd0caad6efc5bf97
github	www.github.com/flatpak/flatpak/commit/b7c1a558e58aaeb1d007d29529bbb270dc4ff11e
github	www.github.com/flatpak/flatpak/commit/bbab7ed1e672356d1a78b422462b210e8e875931
github	www.github.com/flatpak/flatpak/security/advisories/GHSA-phv6-cpc2-2fgj
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IB6VQAF5S2YOBULDHPUKPOEIKONOP5KO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZFNSCFJVMAQK5AF55JBN7OSJP3CREDBD/
openwall	www.openwall.com/lists/oss-security/2024/04/18/5

09 May 2024 09:40Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.4

EPSS0.00247

SSVC