← Back

CVE-2023-1523

nvd nist
Published: Sep 1, 2023Modified: Jun 17, 2026

JSON object

Loading...
10.0
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 6.0
Source: NVD

Description

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others are not affected - this can only be exploited when snaps are run on a virtual console.

Affected (7)

2 products
Snapd
Ubuntu Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Before 2.59.5
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 16.04
Version 18.04
Version 20.04
Version 22.04
Version 22.10
Version 23.04

References (8)

Source: security@ubuntu.com
Third Party Advisory
Source: security@ubuntu.com
Issue TrackingPatch
Source: security@ubuntu.com
ExploitMailing List
Source: security@ubuntu.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.