Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

stapp · Feb 14, 2024

A logic flaw between Ubuntu's 'command-not-found' package suggestion system and the snap package repository could enable attackers to promote malicious Linux packages to unsuspecting users.

The problem arises from the utility's ability to suggest snap packages for installation when they are missing without a validation mechanism to ensure that packages are authentic and safe.
Click to expand...

https://www.bleepingcomputer.com/ne...t-found-tool-can-be-abused-to-spread-malware/

Log in or Sign up

Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

stapp Global Moderator

Members

Useful Searches