x/vulndb: potential Go vuln in github.com/snapcore/snapd: CVE-2023-1523

[GoVulnBot]

CVE-2023-1523 references github.com/snapcore/snapd, which may be a Go module.

Description:
Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others are not affected - this can only be exploited when snaps are run on a virtual console.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2023-1523
• JSON: https://github.com/CVEProject/cvelist/tree/fbeab2cd8a64abb4675e1aef323ffd101cffa2ec/2023/1xxx/CVE-2023-1523.json
• web: https://ubuntu.com/security/notices/USN-6125-1
• fix: many: introduce seccomp denylist to block ioctl with TIOCLINUX to fix CVE-2023-1523 canonical/snapd#12849
• web: https://marc.info/?l=oss-security&m=167879021709955&w=2
• web: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1523
• Imported by: https://pkg.go.dev/github.com/snapcore/snapd?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/snapcore/snapd
      vulnerable_at: 0.0.0-20230901132814-b81a8b2e2314
      packages:
        - package: snapd
description: |-
    Using the TIOCLINUX ioctl request, a malicious snap could inject contents into
    the input of the controlling terminal which could allow it to cause arbitrary
    commands to be executed outside of the snap sandbox after the snap exits.
    Graphical terminal emulators like xterm, gnome-terminal and others are not
    affected - this can only be exploited when snaps are run on a virtual console.
cves:
    - CVE-2023-1523
references:
    - web: https://ubuntu.com/security/notices/USN-6125-1
    - fix: https://github.com/snapcore/snapd/pull/12849
    - web: https://marc.info/?l=oss-security&m=167879021709955&w=2
    - web: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1523

[gopherbot]

Change https://go.dev/cl/527176 mentions this issue: data/excluded: batch add 14 excluded reports

[gopherbot]

Change https://go.dev/cl/592762 mentions this issue: data/reports: unexclude 75 reports