CVE-2020-16123: Bypass of snapd pulseaudio restrictions

Published Dec 3, 2020

Updated

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCMCREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information. Fixed in 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15.

Affected Software

4 affected components

Ubuntu=16.04

Ubuntu=18.04

Ubuntu=20.04

Ubuntu=20.10

Remediation

Patch Available

https://ubuntu.com/USN-4640-1

Event History

Dec 3, 2020

CVE Published

via MITRE·11:15 PM

Data Sourced

via MITRE·11:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-16123?

CVE-2020-16123 is classified as a medium severity vulnerability.

How do I fix CVE-2020-16123?

To fix CVE-2020-16123, update your Ubuntu system to the latest provided security patches.

Which Ubuntu versions are affected by CVE-2020-16123?

CVE-2020-16123 affects Ubuntu versions 16.04, 18.04, 20.04, and 20.10.

What type of vulnerability is CVE-2020-16123?

CVE-2020-16123 is a race condition vulnerability in the PulseAudio snap policy module.

What could happen if CVE-2020-16123 is exploited?

Exploitation of CVE-2020-16123 could allow a snap to connect to PulseAudio without proper confinement, leading to potential privilege escalation.