CVE-2020-16123

Bypass of snapd pulseaudio restrictions

State: Published
Severity: 4.4 Medium
Published: Dec 3, 2020
Updated: Sep 16, 2024
Reserved: Jul 29, 2020

Description

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information. Fixed in 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N	canonical

Weaknesses

CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)

Affected Products

Product	Versions
pulseaudioCanonical	1:13.99.3-1 to before 1:13.99.3-1ubuntu2Affected 1:13.99.2-1 to before 1:13.99.2-1ubuntu2.1Affected 1:13.99.1-1 to before 1:13.99.1-1ubuntu3.8Affected 1:11.1-1 to before 1:11.1-1ubuntu7.11Affected 1:8.0-0 to before 1:8.0-0ubuntu3.15Affected

References

https://launchpad.net/bugs/1895928vendor-advisory
https://ubuntu.com/USN-4640-1vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.