The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7197:04 advisory.

    * flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
      * flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual     console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command     buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal     emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the     Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8,     1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is     primarily designed to be used in a Wayland or X11 graphical environment. (CVE-2023-28100)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7038 advisory.

    [1.10.8-1]
    - Rebase to 1.10.8 (#2222103)
    - Fix CVE-2023-28100 and CVE-2023-28101 (#2180311)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6670:03 advisory.

    * flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
      * flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of flatpak installed on the remote host is prior to 1.0.9-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2134 advisory.

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the TIOCLINUX ioctl command instead of TIOCSTI. If a Flatpak app is run on a Linux virtual console     such as /dev/tty1, it can copy text from the virtual console and paste it into the command buffer, from     which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators     like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual     consoles /dev/tty1, /dev/tty2 and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and     1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be     used in a Wayland or X11 graphical environment. (CVE-2023-28100)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9fbc701e0d advisory.

    Update to 1.12.8

    * Fix CVE-2023-28100 and CVE-2023-28101

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1714-1 advisory.

    - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410).
    - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).

    Update to version 1.10.8:

    - If an app update is blocked by parental controls policies,       clean up the temporary deploy directory
    - Fix Autotools build with versions of gpgme that no longer       provide gpgme-config(1)
    - Fix regressions in `flatpak history` since 1.9.1
      - Don't display the appstream branch used internally
      - Don't display temporary repositories used internally
      - Ignore transaction log entries with empty REF field
      - Warn instead of failing if other non-app, non-runtime refs are found
      - Don't set up an unnecessary polkit agent for `flatpak history`
      - Add test coverage
    - Fix a typo in an error message
    - Fix incorrect year in NEWS for 1.10.7 release
    - Translation update: pl
    - Add test coverage for Flatpak's seccomp filters

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1715-1 advisory.

    - CVE-2023-28101: Fixed misleading terminal output with  metadata with ANSI control codes (bsc#1209410).
    - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).

    Update to version 1.12.8:

    - Update the SELinux module to explicitly permit the system           helper have read access to /etc/passwd and systemd-userdbd,           read and lock access to /var/lib/flatpak, and watch files           inside $libexecdir
    - If an app update is blocked by parental controls policies,           clean up the temporary deploy directory
    - Fix Autotools build with versions of gpgme that no longer           provide gpgme-config(1)
    - Remove some unreachable code
    - Add missing handling for some D-Bus errors

    Update to version 1.12.7:

    - We now allow networked access to X11 and PulseAudio services         if that is configured, and the application has network access.
    - Absolute paths in WAYLAND_DISPLAY now work
    - Allow apps that were built with Flatpak 1.13.x to export         AppStream metadata in share/metainfo
    - Most commands now work if /var/lib/flatpak exists but

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6518 advisory.

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

    The following packages have been upgraded to a later upstream version: flatpak (1.12.8). (BZ#2221792)

    Security Fix(es):

    * flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)

    * flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has flatpak packages installed that are affected by multiple vulnerabilities:

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual     console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command     buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal     emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the     Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8,     1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is     primarily designed to be used in a Wayland or X11 graphical environment. (CVE-2023-28100)

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in     versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute     arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be     given a command to run in the specified Flatpak app, optionally along with some arguments. However it is     possible to instead pass `bwrap` arguments to `--command=`, such as `--bind`. It's possible to pass an     arbitrary `commandline` to the portal interface `org.freedesktop.portal.Background.RequestBackground` from     within a Flatpak app. When this is converted into a `--command` and arguments, it achieves the same effect     of passing arguments directly to `bwrap`, and thus can be used for a sandbox escape. The solution is to     pass the `--` argument to `bwrap`, which makes it stop processing options. This has been supported since     bubblewrap 0.3.0. All supported versions of Flatpak require at least that version of bubblewrap. xdg-     desktop-portal version 1.18.4 will mitigate this vulnerability by only allowing Flatpak apps to create     .desktop files for commands that do not start with --. The vulnerability is patched in 1.15.8, 1.10.9,     1.12.9, and 1.14.6. (CVE-2024-32462)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1712-1 advisory.

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual     console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command     buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal     emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the     Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8,     1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is     primarily designed to be used in a Wayland or X11 graphical environment. (CVE-2023-28100)

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In     versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated     permissions, they can hide those permissions from users of the `flatpak(1)` command-line interface by     setting other permissions to crafted values that contain non-printable control characters such as `ESC`. A     fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME     Software rather than the command-line interface, or only install apps whose maintainers you trust.
    (CVE-2023-28101)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6518 advisory.

    [1.12.8-1]
    - Update to 1.12.8 (CVE-2023-28100, CVE-2023-28101)     Resolves: #2180312, #2221792

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the flatpak-1.12.8-1.el9 build changelog.

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual     console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command     buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal     emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the     Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8,     1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is     primarily designed to be used in a Wayland or X11 graphical environment. (CVE-2023-28100)

  - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In     versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated     permissions, they can hide those permissions from users of the `flatpak(1)` command-line interface by     setting other permissions to crafted values that contain non-printable control characters such as `ESC`. A     fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME     Software rather than the command-line interface, or only install apps whose maintainers you trust.
    (CVE-2023-28101)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0295 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-28100:
      Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
    Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but     using the TIOCLINUX ioctl command instead of TIOCSTI. If a Flatpak app is run on a Linux virtual console     such as /dev/tty1, it can copy text from the virtual console and paste it into the command buffer, from     which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators     like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual     consoles /dev/tty1, /dev/tty2 and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and     1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be     used in a Wayland or X11 graphical environment.

      CVE-2023-28101:
      Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In     versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated     permissions, they can hide those permissions from users of the flatpak(1) command-line interface by     setting other permissions to crafted values that contain non-printable control characters such as ESC. A     fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME     Software rather than the command-line interface, or only install apps whose maintainers you trust.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
293558	MiracleLinux 8 : flatpak-1.10.8-1.el8 (AXSA:2023-7197:04)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
258291	Linux Distros Unpatched Vulnerability : CVE-2023-28100	Nessus	Misc.	2025/8/30	2026/6/9	medium
186096	Oracle Linux 8 : flatpak (ELSA-2023-7038)	Nessus	Oracle Linux Local Security Checks	2023/11/21	2025/9/9	medium
291812	MiracleLinux 9 : flatpak-1.12.8-1.el9 (AXSA:2023-6670:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
178541	Amazon Linux 2 : flatpak (ALAS-2023-2134)	Nessus	Amazon Linux Local Security Checks	2023/7/20	2024/12/11	medium
173750	Fedora 36 : flatpak (2023-9fbc701e0d)	Nessus	Fedora Local Security Checks	2023/4/2	2024/11/14	medium
173770	SUSE SLES15: flatpak / flatpak-devel / flatpak-zsh-completion / libflatpak0 / etc (SUSE-SU-2023:1714-1)	Nessus	SuSE Local Security Checks	2023/4/2	2026/6/26	medium
173772	SUSE SLED15: flatpak / flatpak-devel / flatpak-zsh-completion / libflatpak0 / etc (SUSE-SU-2023:1715-1)	Nessus	SuSE Local Security Checks	2023/4/2	2026/6/26	medium
185103	RHEL 9 : flatpak (RHSA-2023:6518)	Nessus	Red Hat Local Security Checks	2023/11/7	2024/11/7	medium
242817	NewStart CGSL MAIN 7.02 : flatpak Multiple Vulnerabilities (NS-SA-2025-0146)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	medium
173766	SUSE SLES12 Security Update : flatpak (SUSE-SU-2023:1712-1)	Nessus	SuSE Local Security Checks	2023/4/2	2023/7/14	medium
185824	Oracle Linux 9 : flatpak (ELSA-2023-6518)	Nessus	Oracle Linux Local Security Checks	2023/11/16	2025/9/9	medium
191390	CentOS 9 : flatpak-1.12.8-1.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	medium
276348	TencentOS Server 3: flatpak (TSSA-2023:0295)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium