CVE-2016-1580 Privilege escalation in n/a
Attackers can gain privileges or read sensitive data via a malicious snap due to improper mount point determination in ubuntu-core-launcher.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-1580?
CVE-2016-1580 is a critical vulnerability in n/a, published on 13 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."
Weakness: CWE-264
Which versions are affected by CVE-2016-1580?
It affects 1 product.
Products include Canonical Ubuntu-Core-Launcher.
How do I fix CVE-2016-1580?
Apply the vendor's patch.
Is CVE-2016-1580 being exploited?
There is no known exploitation of CVE-2016-1580 in the wild and no public exploit code.
Sources
Also known as GHSA-qh3c-5ph2-fh82, UBUNTU-CVE-2016-1580, USN-2956-1.