CVE-2020-27349: aptdaemon performed policykit permissions checks too late
Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27349?
CVE-2020-27349 is considered a high severity vulnerability due to policykit checks being performed after interacting with untrusted files with elevated privileges.
How do I fix CVE-2020-27349?
To fix CVE-2020-27349, upgrade aptdaemon to version 1.1.1+bzr982-0ubuntu34.1 or later.
Which Ubuntu versions are affected by CVE-2020-27349?
CVE-2020-27349 affects Ubuntu versions 16.04, 18.04, 20.04, and 20.10 that have aptdaemon versions prior to the specified fixed versions.
What software component is impacted by CVE-2020-27349?
The software component impacted by CVE-2020-27349 is the aptdaemon package.
What potential exploit can occur due to CVE-2020-27349?
Due to CVE-2020-27349, an attacker could leverage elevated privileges to perform unauthorized actions on the system.