Skip to content
OpenAdvisories
Low USN-4664-1 2 CVEs

aptdaemon vulnerabilities

Published Dec 8, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Kevin Backhouse discovered that Aptdaemon incorrectly handled certain
properties. A local attacker could use this issue to test for the presence
of local files. (CVE-2020-16128)

Kevin Backhouse discovered that Aptdaemon incorrectly handled permission
checks. A local attacker could possibly use this issue to cause a denial of
service. (CVE-2020-27349)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS aptdaemon 1.1.1+bzr982-0ubuntu14.5
Ubuntu · 18.04 LTS 18.04:LTS aptdaemon 1.1.1+bzr982-0ubuntu19.5
Ubuntu · 20.04 LTS 20.04:LTS aptdaemon 1.1.1+bzr982-0ubuntu32.3

Vulnerabilities 2

  • Low 3.8
    CVE-2020-16128

    Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties

    The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1…

    Canonical aptdaemon aptdaemon Ubuntu
  • Unscored —
    CVE-2020-27349

    aptdaemon performed policykit permissions checks too late

    Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.

    Canonical aptdaemon aptdaemon Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-16128
  • report
    https://ubuntu.com/security/CVE-2020-27349