Description
The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
None
Affected products
- Canonical / aptdaemon1.1.1+bzr982-0ubuntu14 – 1.1.1+bzr982-0ubuntu14.5
- Canonical / aptdaemon1.1.1+bzr982-0ubuntu19 – 1.1.1+bzr982-0ubuntu19.5
- Canonical / aptdaemon1.1.1+bzr982-0ubuntu32 – 1.1.1+bzr982-0ubuntu32.3
- Canonical / aptdaemon1.1.1+bzr982-0ubuntu34 – 1.1.1+bzr982-0ubuntu34.1