High severity · published Feb 2, 2018
CVE-2018-6560
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because…
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.6 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.5; 7.6 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.6 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
FL
Flatpak · Flatpak
before 0.8.9; 0.9.1 through 0.9.99; 0.10.0 before 0.10.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-6560
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-6560
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2766
Patch
https://github.com/flatpak/flatpak/commit/52346bf187b5a7f1c0fe9075b328b7ad6abe78f6
Release Notes
https://github.com/flatpak/flatpak/releases/tag/0.10.3
Release Notes
https://github.com/flatpak/flatpak/releases/tag/0.8.9
More from Flatpak
10.0
CVE-2026-34078
Flatpak has a complete sandbox escape leading to host file access and code execution in the host context
10.0
CVE-2024-42472
Flatpak is a Linux application sandboxing and distribution framework
9.0
CVE-2019-10063
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass
8.8
CVE-2021-21261
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux
8.6
CVE-2021-43860
Flatpak is a Linux application sandboxing and distribution framework