Home

CVE-2020-16123

Description

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information. Fixed in 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15.

Risk Information

Base Score
4.7
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.086

Associated Vulnerability

VulnerabilityOS Platform
PulseAudio sound server (USN-4640-1) libpulse0_8.0-0ubuntu3.15_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_8.0-0ubuntu3.15_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse0_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_8.0-0ubuntu3.15_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_8.0-0ubuntu3.15_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_8.0-0ubuntu3.15_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_8.0-0ubuntu3.15_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulsedsp_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gsettings_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gsettings_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gsettings_13.99.2-1ubuntu2.1_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gsettings_13.99.2-1ubuntu2.1_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-utils_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-utils_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-utils_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-utils_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-equalizer_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-equalizer_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-equalizer_13.99.1-1ubuntu3.8_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-equalizer_13.99.1-1ubuntu3.8_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-jack_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-lirc_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-raop_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) libpulse-mainloop-glib0_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gconf_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-gconf_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-esound-compat_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-esound-compat_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-zeroconf_11.1-1ubuntu7.11_amd64.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_11.1-1ubuntu7.11_i386.debLinux
PulseAudio sound server (USN-4640-1) pulseaudio-module-bluetooth_11.1-1ubuntu7.11_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234