Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-1277

kylin-system-updater Update InstallSnap command injection

Description

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a kylin-system-updater

  • 1.4.20kordaffected

References