Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-3250
6.5
MEDIUMCVSS v3
Severity scale
010
Description
It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also available as backports to v1.1.1, v1.4.2, and v1.7.4.
canonical/pebble
GitHubPebble is a lightweight Linux service manager with layered configuration and an HTTP API
GitHubPebble is a lightweight Linux service manager with layered configuration and an HTTP API< 1.4.1, >= 1.4.2, < 1.7.3, >= 1.7.4, < 1.10.2NVD