Detections
Analytics
Alpine: multiple flatpak packages: security update to 1.10.1-r0
high Tenable Self-Hosted Container Security Plugin ID 404473
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug
was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary
code on the host system (a sandbox escape). This sandbox-escape bug is present in versions from 0.11.4 and
before fixed versions 1.8.5 and 1.10.0. The Flatpak portal D-Bus service (`flatpak-portal`, also known by
its D-Bus service name `org.freedesktop.portal.Flatpak`) allows apps in a Flatpak sandbox to launch their
own subprocesses in a new sandbox instance, either with the same security settings as the caller or with
more restrictive security settings. For example, this is used in Flatpak-packaged web browsers such as
Chromium to launch subprocesses that will process untrusted web content, and give those subprocesses a
more restrictive sandbox than the browser itself. In vulnerable versions, the Flatpak portal service
passes caller-specified environment variables to non-sandboxed processes on the host system, and in
particular to the `flatpak run` command that is used to launch the new sandbox instance. A malicious or
compromised Flatpak app could set environment variables that are trusted by the `flatpak run` command, and
use them to execute arbitrary code that is not in a sandbox. As a workaround, this vulnerability can be
mitigated by preventing the `flatpak-portal` service from starting, but that mitigation will prevent many
Flatpak apps from working correctly. This is fixed in versions 1.8.5 and 1.10.0. (CVE-2021-21261)
See Also
Plugin Details
Severity: High
ID: 404473
Version: Revision 1.35
Type: Local
Published: 10/31/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 95.11
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2021-21261
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 1/14/2021
Reference Information
CVE: CVE-2021-21261