<p>There is no fixed version for <code>Debian:10</code> <code>packagekit</code>.</p>

Improper Privilege Management Affecting packagekit package, versions *

Snyk CVSS

Attack Complexity Low

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS 0.04% (12^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-DEBIAN10-PACKAGEKIT-1012669
published 25 Sep 2020
disclosed 7 Nov 2020

Report a new vulnerability Found a mistake?

Introduced: 25 Sep 2020

CVE-2020-16122 Open this link in a new tab CWE-269 Open this link in a new tab

How to fix?

There is no fixed version for Debian:10 packagekit.

NVD Description

Note: Versions mentioned in the description apply only to the upstream packagekit package and not the packagekit package as distributed by Debian. See How to fix? for Debian:10 relevant fixed versions and status.

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.