6.7Mittel

CVE-2016-1579UDM doesn't check for confinement before running post-processing commands

Ubuntu Ubuntu Download Manager Veröffentlicht: 2019-04-22 18:35 (vor 7 Jahren)

Beschreibung

UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Ubuntu	Ubuntu Download Manager	unspecified – < 1.2+16.04.20160408-0ubuntu1

Referenzen und Patches

https://bazaar.launchpad.net/~phablet-team/ubuntu-download-manager/trunk/revision/359

CVSS-Score

6.7Mittel

Quelle: canonical · CVSS 3.0

Angriffsvektor: Lokal
Komplexität: Hoch
Rechte erforderlich: Niedrig
Benutzerinteraktion: Erforderlich
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.77%

höher als 56 % aller CVEs

Zeitverlauf

ID reserviert2016-01-12
Veröffentlicht2019-04-22 18:35
Bei IP-DB eingegangen2026-10-24 23:53
Zuletzt aktualisiert2024-09-16 19:27

Vergeben von (CNA): canonical

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Ubuntu

7.7Hoch

CVE-2026-109518 vor 6 Tagen

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

6.5Mittel

CVE-2026-121412 vor 7 Tagen

FreeRDP 3.0.0 before 3.32.2 Proxy Memory Exhaustion via DVC Reassembly

FreeRDP FreeRDP

FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets connected clients retain heap memory via intercepted DVC message reassembly. Attackers can declare a large DATA_FIRST length and keep sending f…

4.3Mittel

CVE-2026-121410 vor 7 Tagen

FreeRDP before 3.32.2 Denial of Service via RDPGFX ALPHA WIRETOSURFACE_2

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to validate zero surface dimensions. A malicious RDP server can send a crafted WIRETOSURFACE_2 PDU with zero width and height, triggering a…

3.1Niedrig

CVE-2026-121411 vor 7 Tagen

FreeRDP before 3.32.2 X11 Client Abort via RDPGFX Scaled Output Geometry

FreeRDP FreeRDP

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked U…

5.9Mittel

CVE-2026-121409 vor 7 Tagen

FreeRDP before 3.32.2 Denial of Service via Oversized X.224 Routing Token

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers to abort clients or proxies via oversized X.224 routing tokens. Attackers can send an oversized LoadBalanceInfo in a Server Redirection PDU…

6.5Mittel

CVE-2026-121407 vor 7 Tagen

FreeRDP before 3.32.2 Shadow Server Denial of Service via remdesk Channel

FreeRDP FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to crash the process via an inverted PDU length check. Attackers can send an 8192-byte remdesk payload declaring an…