Summary
Ein Angreifer kann mehrere Schwachstellen im ubuntu-pro-client von Ubuntu Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und vertrauliche Informationen offenzulegen.
Product
Ubuntu Linux ist die Linux Distribution des Herstellers Canonical.
Vulnerabilities 3
-
Critical 9.0
ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT source files (such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents) using data received dire…
-
Medium 5.5
ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line
An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the sec…
-
Medium 5.0
ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs
An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framework. The utility creates or utilizes predictable temporary file paths or user-accessible log director…
Revision history
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
Ubuntu Security Notice USN-8555-1 vom 2026-07-16
https://ubuntu.com/security/notices/USN-8555-1
-
Ubuntu Security Notice USN-8555-2 vom 2026-09-01
https://ubuntu.com/security/notices/USN-8555-2