CVE-2023-28100

CVSS V2 None CVSS V3 None
Description
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment.
Overview
  • CVE ID
  • CVE-2023-28100
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-16T16:15:12
  • Last Modified Date
  • 2023-04-18T13:37:35
Weakness Enumerations
CWE URL
NVD-CWE-noinfo http://cwe.mitre.org/data/definitions/NVD-noinfo.html
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:* 1 OR 1.10.8
cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:* 1 OR 1.12.0 1.12.8
cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:* 1 OR 1.14.0 1.14.4
cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:* 1 OR 1.15.0 1.15.4
References
Reference URL Reference Tags
https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9 Patch
https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqp Patch Vendor Advisory
https://marc.info/?l=oss-security&m=167879021709955&w=2 Mailing List
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28100
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28100
History
Created Old Value New Value Data Type Notes
2023-04-17 06:35:26 Added to TrackCVE
2023-04-17 06:35:29 Weakness Enumeration new
2023-04-17 15:01:00 Analyzed Undergoing Analysis Vulnerability Status updated
2023-04-18 14:01:10 2023-04-18T13:37:35 CVE Modified Date updated
2023-04-18 14:01:10 Undergoing Analysis Analyzed Vulnerability Status updated