3.3
Low
CVE-2020-16121 PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and…
Description
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| packagekit 1.1 | 1.1.9-1ubuntu2 → < 1.1.13-2ubuntu1.1 | 1.1.13-2ubuntu1.1 |
| packagekit 0.8 | 0.8.17-4ubuntu6 → latest | No fix stated |
References
- www.eyecontrol.nl www.eyecontrol.nl
- bugs.launchpad.net bugs.launchpad.net
Timeline
- Published
- Last modified
Other CVEs of packagekit
The 4 CVEs of packagekit →
CVE-2026-41651
PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a…
8.8
High
CVE-2020-16122
PackageKit's apt backend mistakenly treated all local debs as trusted
8.2
High
CVE-2011-2515
PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation…
Not rated