Aller au contenu
en Se connecter
3.3 Faible

CVE-2020-11931 An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found…

Description

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the pulseaudio snap policy module. This issue affects: pulseaudio 1:8.0 versions prior to 1:8.0-0ubuntu3.12; 1:11.1 versions prior to 1:11.1-1ubuntu7.7; 1:13.0 versions prior to 1:13.0-1ubuntu1.2; 1:13.99.1 versions prior to 1:13.99.1-1ubuntu3.2;

Produits et versions touchés

Produit Versions touchées Corrigé en
pulseaudio Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de pulseaudio

Les 3 CVE de pulseaudio →
CVE-2020-16123 An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a… 4.4 Moyenne CVE-2020-15710 Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program 5.3 Moyenne
Suivre cette CVE