Threats tagged 'ghsa-6c74-7qpx-6vqc'

AGL app-framework-binder (afb-daemon) versions through 19.90.0 contain a vulnerability that allows any local process to execute privileged supervision commands without authentication via an unprotected abstract Unix socket. This flaw permits unauthorized local users to perform actions such as killing the daemon, executing arbitrary API calls, closing user sessions, or leaking global configuration data.