Input validation error in Flatpak - CVE-2023-28101

Vulnerability identifier: #VU73834

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-28101

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to insufficient validation of user-supplied input when displaying permissions and metadata. A remote attacker can create a specially crafted app that manipulates the appearance of the permissions list through metadata, convincing the user into granting to the app more permissions than agreed by the user.

Flatpak
Oracle Linux
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Desktop Applications Module
openSUSE Leap
openEuler
Fedora
flatpak-zsh-completion
libflatpak0-debuginfo
flatpak
typelib-1_0-Flatpak-1_0
flatpak-debugsource
flatpak-debuginfo
flatpak-devel
libflatpak0
flatpak-help
flatpak (Red Hat package)
flatpak-selinux
flatpak-session-helper
flatpak-libs
system-user-flatpak
sys-apps/flatpak
Red Hat Migration Toolkit for Applications

Install updates from vendor's website.

Flatpak - addressed in versions 1.10.8, 1.12.8, 1.14.4, 1.15.4
flatpak-zsh-completion - addressed in versions 1.2.3-150100.4.11.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
libflatpak0-debuginfo - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
typelib-1_0-Flatpak-1_0 - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak-debugsource - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak-debuginfo - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak-devel - addressed in versions 1.2.3-150100.4.11.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
libflatpak0 - addressed in versions 1.2.3-150100.4.11.1, 1.4.2-3.3.1, 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak - update to 1.10.2-7
flatpak-debuginfo - update to 1.10.2-7
flatpak-devel - update to 1.10.2-7
flatpak-help - update to 1.10.2-7
flatpak-debugsource - update to 1.10.2-7
flatpak (Red Hat package) - addressed in versions 1.10.8-1.el8, 1.12.8-1.el9
flatpak-selinux - update to 1.10.8-1.0.1
flatpak-session-helper - update to 1.10.8-1.0.1
flatpak-libs - update to 1.10.8-1.0.1
flatpak-devel - update to 1.10.8-1.0.1
flatpak - update to 1.10.8-1.0.1
system-user-flatpak - addressed in versions 1.10.8-150200.4.15.1, 1.12.8-150400.3.3.1
flatpak - addressed in versions 1.12.8-1.fc36, 1.14.4-1.fc37, 1.15.4-1.fc38
sys-apps/flatpak - update to 1.14.4
Red Hat Migration Toolkit for Applications - update to 6.2

• https://github.com/flatpak/flatpak/commit/6cac99dafe6003c8a4bd5666341c217876536869
• https://github.com/flatpak/flatpak/commit/7fe63f2e8f1fd2dafc31d45154cf0b191ebec66c
• https://github.com/flatpak/flatpak/commit/409e34187de2b2b2c4ef34c79f417be698830f6c
• https://github.com/flatpak/flatpak/security/advisories/GHSA-h43h-fwqx-mpp8

• Multiple vulnerabilities in flatpak
• SUSE update for flatpak
• SUSE update for flatpak
• SUSE update for flatpak
• SUSE update for flatpak
• Fedora 38 update for flatpak
• Fedora 37 update for flatpak
• Fedora 36 update for flatpak
• Red Hat Enterprise Linux 9 update for flatpak
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8 update for flatpak
• Gentoo update for Flatpak
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• openEuler 22.03 LTS SP3 update for flatpak
• openEuler 22.03 LTS update for flatpak
• openEuler 22.03 LTS SP1 update for flatpak
• openEuler 22.03 LTS SP2 update for flatpak
• Anolis OS update for flatpak