CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6560

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 4.6

References

Products affected by CVE-2018-6560

Flatpak » Flatpak » Version: 0.1

cpe:2.3:a:flatpak:flatpak:0.1
Flatpak » Flatpak » Version: 0.10.0

cpe:2.3:a:flatpak:flatpak:0.10.0
Flatpak » Flatpak » Version: 0.10.1

cpe:2.3:a:flatpak:flatpak:0.10.1
Flatpak » Flatpak » Version: 0.10.2

cpe:2.3:a:flatpak:flatpak:0.10.2
Flatpak » Flatpak » Version: 0.10.2.1

cpe:2.3:a:flatpak:flatpak:0.10.2.1
Flatpak » Flatpak » Version: 0.2

cpe:2.3:a:flatpak:flatpak:0.2
Flatpak » Flatpak » Version: 0.2.1

cpe:2.3:a:flatpak:flatpak:0.2.1
Flatpak » Flatpak » Version: 0.3

cpe:2.3:a:flatpak:flatpak:0.3
Flatpak » Flatpak » Version: 0.3.1

cpe:2.3:a:flatpak:flatpak:0.3.1
Flatpak » Flatpak » Version: 0.3.2

cpe:2.3:a:flatpak:flatpak:0.3.2
Flatpak » Flatpak » Version: 0.3.3

cpe:2.3:a:flatpak:flatpak:0.3.3
Flatpak » Flatpak » Version: 0.3.4

cpe:2.3:a:flatpak:flatpak:0.3.4
Flatpak » Flatpak » Version: 0.3.5

cpe:2.3:a:flatpak:flatpak:0.3.5
Flatpak » Flatpak » Version: 0.3.6

cpe:2.3:a:flatpak:flatpak:0.3.6
Flatpak » Flatpak » Version: 0.4.0

cpe:2.3:a:flatpak:flatpak:0.4.0
Flatpak » Flatpak » Version: 0.4.1

cpe:2.3:a:flatpak:flatpak:0.4.1
Flatpak » Flatpak » Version: 0.4.10

cpe:2.3:a:flatpak:flatpak:0.4.10
Flatpak » Flatpak » Version: 0.4.11

cpe:2.3:a:flatpak:flatpak:0.4.11
Flatpak » Flatpak » Version: 0.4.12

cpe:2.3:a:flatpak:flatpak:0.4.12
Flatpak » Flatpak » Version: 0.4.13

cpe:2.3:a:flatpak:flatpak:0.4.13
Flatpak » Flatpak » Version: 0.4.2

cpe:2.3:a:flatpak:flatpak:0.4.2
Flatpak » Flatpak » Version: 0.4.2.1

cpe:2.3:a:flatpak:flatpak:0.4.2.1
Flatpak » Flatpak » Version: 0.4.3

cpe:2.3:a:flatpak:flatpak:0.4.3
Flatpak » Flatpak » Version: 0.4.4

cpe:2.3:a:flatpak:flatpak:0.4.4
Flatpak » Flatpak » Version: 0.4.5

cpe:2.3:a:flatpak:flatpak:0.4.5
Flatpak » Flatpak » Version: 0.4.6

cpe:2.3:a:flatpak:flatpak:0.4.6
Flatpak » Flatpak » Version: 0.4.7

cpe:2.3:a:flatpak:flatpak:0.4.7
Flatpak » Flatpak » Version: 0.4.8

cpe:2.3:a:flatpak:flatpak:0.4.8
Flatpak » Flatpak » Version: 0.4.9

cpe:2.3:a:flatpak:flatpak:0.4.9
Flatpak » Flatpak » Version: 0.5.0

cpe:2.3:a:flatpak:flatpak:0.5.0
Flatpak » Flatpak » Version: 0.5.1

cpe:2.3:a:flatpak:flatpak:0.5.1
Flatpak » Flatpak » Version: 0.5.2

cpe:2.3:a:flatpak:flatpak:0.5.2
Flatpak » Flatpak » Version: 0.6.0

cpe:2.3:a:flatpak:flatpak:0.6.0
Flatpak » Flatpak » Version: 0.6.1

cpe:2.3:a:flatpak:flatpak:0.6.1
Flatpak » Flatpak » Version: 0.6.10

cpe:2.3:a:flatpak:flatpak:0.6.10
Flatpak » Flatpak » Version: 0.6.11

cpe:2.3:a:flatpak:flatpak:0.6.11
Flatpak » Flatpak » Version: 0.6.12

cpe:2.3:a:flatpak:flatpak:0.6.12
Flatpak » Flatpak » Version: 0.6.13

cpe:2.3:a:flatpak:flatpak:0.6.13
Flatpak » Flatpak » Version: 0.6.14

cpe:2.3:a:flatpak:flatpak:0.6.14
Flatpak » Flatpak » Version: 0.6.2

cpe:2.3:a:flatpak:flatpak:0.6.2
Flatpak » Flatpak » Version: 0.6.3

cpe:2.3:a:flatpak:flatpak:0.6.3
Flatpak » Flatpak » Version: 0.6.4

cpe:2.3:a:flatpak:flatpak:0.6.4
Flatpak » Flatpak » Version: 0.6.5

cpe:2.3:a:flatpak:flatpak:0.6.5
Flatpak » Flatpak » Version: 0.6.6

cpe:2.3:a:flatpak:flatpak:0.6.6
Flatpak » Flatpak » Version: 0.6.7

cpe:2.3:a:flatpak:flatpak:0.6.7
Flatpak » Flatpak » Version: 0.6.8

cpe:2.3:a:flatpak:flatpak:0.6.8
Flatpak » Flatpak » Version: 0.6.9

cpe:2.3:a:flatpak:flatpak:0.6.9
Flatpak » Flatpak » Version: 0.8.0

cpe:2.3:a:flatpak:flatpak:0.8.0
Flatpak » Flatpak » Version: 0.8.1

cpe:2.3:a:flatpak:flatpak:0.8.1
Flatpak » Flatpak » Version: 0.8.2

cpe:2.3:a:flatpak:flatpak:0.8.2
Flatpak » Flatpak » Version: 0.8.3

cpe:2.3:a:flatpak:flatpak:0.8.3
Flatpak » Flatpak » Version: 0.8.4

cpe:2.3:a:flatpak:flatpak:0.8.4
Flatpak » Flatpak » Version: 0.8.5

cpe:2.3:a:flatpak:flatpak:0.8.5
Flatpak » Flatpak » Version: 0.8.6

cpe:2.3:a:flatpak:flatpak:0.8.6
Flatpak » Flatpak » Version: 0.8.7

cpe:2.3:a:flatpak:flatpak:0.8.7
Flatpak » Flatpak » Version: 0.8.8

cpe:2.3:a:flatpak:flatpak:0.8.8
Flatpak » Flatpak » Version: 0.9.1

cpe:2.3:a:flatpak:flatpak:0.9.1
Flatpak » Flatpak » Version: 0.9.10

cpe:2.3:a:flatpak:flatpak:0.9.10
Flatpak » Flatpak » Version: 0.9.11

cpe:2.3:a:flatpak:flatpak:0.9.11
Flatpak » Flatpak » Version: 0.9.12

cpe:2.3:a:flatpak:flatpak:0.9.12
Flatpak » Flatpak » Version: 0.9.2

cpe:2.3:a:flatpak:flatpak:0.9.2
Flatpak » Flatpak » Version: 0.9.3

cpe:2.3:a:flatpak:flatpak:0.9.3
Flatpak » Flatpak » Version: 0.9.4

cpe:2.3:a:flatpak:flatpak:0.9.4
Flatpak » Flatpak » Version: 0.9.5

cpe:2.3:a:flatpak:flatpak:0.9.5
Flatpak » Flatpak » Version: 0.9.6

cpe:2.3:a:flatpak:flatpak:0.9.6
Flatpak » Flatpak » Version: 0.9.7

cpe:2.3:a:flatpak:flatpak:0.9.7
Flatpak » Flatpak » Version: 0.9.8

cpe:2.3:a:flatpak:flatpak:0.9.8
Flatpak » Flatpak » Version: 0.9.9

cpe:2.3:a:flatpak:flatpak:0.9.9
Flatpak » Flatpak » Version: 0.9.98

cpe:2.3:a:flatpak:flatpak:0.9.98
Flatpak » Flatpak » Version: 0.9.98.1

cpe:2.3:a:flatpak:flatpak:0.9.98.1
Flatpak » Flatpak » Version: 0.9.98.2

cpe:2.3:a:flatpak:flatpak:0.9.98.2
Flatpak » Flatpak » Version: 0.9.99

cpe:2.3:a:flatpak:flatpak:0.9.99
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6560

Products

Pricing

Contact Us