Lucene search
China National Vulnerability DatabaseCNVD-2021-103405HistoryOct 11, 2021 - 12:00 a.m.
Flatpak input validation error vulnerability
2021-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
0.0005 Low
EPSS
Percentile
17.2%
Flatpak is a suite of application virtualization systems for Linux desktop application computing environments. versions prior to Flatpak 1.12.0 and 1.10.4 contain an input validation error vulnerability that stems from direct access to AF_UNIX sockets (such as those used by Wayland, Pipewire or Pipewire pulse ) of the Flatpak application can trick portals and other host OS services into treating the Flatpak application as a normal, non-sandboxed host OS process. No detailed vulnerability details are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flatpak flatpak | lt | 1.12.0 | |
| flatpak flatpak | lt | 1.10.4 |
Related
cve
cve
CVE-2021-41133
2021-10-08 14:15:08
CVE-2021-42762
2021-10-20 19:15:07
almalinux
almalinux
flatpak bug fix and enhancement update
2021-11-09 19:26:12
Important: flatpak security update
2021-11-01 13:11:58
openvas
openvas
Debian: Security Advisory (DSA-4984-1)
2021-10-15 00:00:00
CentOS: Security Advisory for flatpak (CESA-2021:4044)
2021-11-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3472-1)
2021-10-21 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : flatpak (SUSE-SU-2021:3472-1)
2021-10-21 00:00:00
RHEL 8 : flatpak (RHSA-2021:4107)
2021-11-03 00:00:00
Amazon Linux 2 : flatpak (ALAS-2023-2076)
2023-06-08 00:00:00
cvelist
cvelist
CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls
2021-10-08 00:00:00
CVE-2021-42762
2021-10-20 18:15:59
amazon
amazon
Important: flatpak
2023-06-05 16:39:00
Important: webkitgtk4
2023-06-07 23:52:00
osv
osv
Important: flatpak security update
2021-11-01 13:11:58
CVE-2021-41133
2021-10-08 14:15:08
flatpak - security update
2021-10-12 00:00:00
alpinelinux
alpinelinux
CVE-2021-41133
2021-10-08 14:15:08
CVE-2021-42762
2021-10-20 19:15:07
ubuntu
ubuntu
Flatpak vulnerability
2021-12-14 00:00:00
rocky
rocky
flatpak security update
2021-11-01 13:11:58
flatpak bug fix and enhancement update
2021-11-09 19:26:12
redhat
redhat
(RHSA-2021:4044) Important: flatpak security update
2021-11-01 15:49:45
(RHSA-2021:4042) Important: flatpak security update
2021-11-01 13:11:58
(RHSA-2021:4106) Important: flatpak security update
2021-11-02 18:10:36
oraclelinux
oraclelinux
flatpak security update
2021-11-01 00:00:00
flatpak security update
2021-11-01 00:00:00
ubuntucve
ubuntucve
CVE-2021-41133
2021-10-08 00:00:00
CVE-2021-42762
2021-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: flatpak-1.10.5-1.fc34
2021-10-12 23:46:05
[SECURITY] Fedora 33 Update: flatpak-1.10.5-1.fc33
2021-10-28 19:31:26
debian
debian
[SECURITY] [DSA 4984-1] flatpak security update
2021-10-12 21:27:27
[SECURITY] [DSA 4984-1] flatpak security update
2021-10-12 21:27:27
suse
suse
Security update for flatpak (important)
2021-10-31 00:00:00
Security update for flatpak (important)
2021-10-20 00:00:00
prion
prion
Code injection
2021-10-08 14:15:00
Authentication flaw
2021-10-20 19:15:00
redhatcve
redhatcve
CVE-2021-41133
2021-10-08 16:53:11
CVE-2021-42762
2021-10-22 16:44:41
mageia
mageia
Updated flatpak packages fix security vulnerability
2021-10-23 13:05:28
veracode
veracode
Privilege Escalation
2021-10-11 09:23:37
nvd
nvd
CVE-2021-41133
2021-10-08 14:15:08
CVE-2021-42762
2021-10-20 19:15:07
centos
centos
flatpak security update
2021-11-17 15:08:41
debiancve
debiancve
CVE-2021-41133
2021-10-08 14:15:08
CVE-2021-42762
2021-10-20 19:15:07
archlinux
archlinux
[ASA-202110-9] webkit2gtk: multiple issues
2021-10-29 00:00:00
[ASA-202110-10] wpewebkit: multiple issues
2021-10-29 00:00:00
gentoo
gentoo
Flatpak: Multiple Vulnerabilities
2023-12-23 00:00:00