Vulnerability Details CVE-2022-4964
Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.9%
CVSS Severity
CVSS v3 Score 5.5
References
- https://bugs.launchpad.net/ubuntu/+source/pipewire/+bug/1995707/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4964
- https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/1779
- https://gitlab.freedesktop.org/pipewire/wireplumber/-/merge_requests/567
- https://bugs.launchpad.net/ubuntu/+source/pipewire/+bug/1995707/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4964
- https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/1779
- https://gitlab.freedesktop.org/pipewire/wireplumber/-/merge_requests/567
Products affected by CVE-2022-4964
-
cpe:2.3:a:canonical:ubuntu_pipewire-pulse:-