CVE-2018-6560

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-436

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://access.redhat.com/errata/RHSA-2018:2766Third Party Advisory
https://github.com/flatpak/flatpak/commit/52346bf187b5a7f1c0fe9075b328b7ad6abe78f6Patch, Vendor Advisory
https://github.com/flatpak/flatpak/releases/tag/0.10.3Release Notes
https://github.com/flatpak/flatpak/releases/tag/0.8.9Release Notes
https://access.redhat.com/errata/RHSA-2018:2766Third Party Advisory
https://github.com/flatpak/flatpak/commit/52346bf187b5a7f1c0fe9075b328b7ad6abe78f6Patch, Vendor Advisory
https://github.com/flatpak/flatpak/releases/tag/0.10.3Release Notes
https://github.com/flatpak/flatpak/releases/tag/0.8.9Release Notes

Timeline

Published: Feb 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-65616.1dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.CVE-2018-65627.5totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessions and encryption key CVE-2018-65638.8Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to CVE-2018-65698.8West Wind Web Server 6.x does not require authentication for /ADMIN.ASP.CVE-2018-65747.8Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source cod CVE-2018-65759.8SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request.CVE-2018-65769.8SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.CVE-2018-65779.8SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubsc CVE-2018-65789.8SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscri CVE-2018-65799.8SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request.CVE-2018-65809.8Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component requ CVE-2018-65819.8SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.