Lucene search

K

GoogleOSV:CVE-2021-4120

HistoryFeb 17, 2022 - 11:15 p.m.

CVE-2021-4120

2022-02-1723:15:07

Google

osv.dev

7

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layout declarations and hence escape strict snap confinement. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

CPENameOperatorVersion
snapdeq2.22
snapdeq2.12
snapdeq2.33.1
snapdeq2.37.1
snapdeq2.44.2
snapdeq0.2.13
snapdeq2.27.6
snapdeq2.43.1
snapdeq1.0.13
snapdeq2.26.4

Rows per page:

1-10 of 2481

References

www.openwall.com/lists/oss-security/2022/02/18/2

bugs.launchpad.net/snapd/+bug/1949368

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTBN7LLZISXIA4KU4UKDR27Q5PXDS2U/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGHG6LJAVJJ72TMART6A7N4Z6MSTGI7/

ubuntu.com/security/notices/USN-5292-1

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

Related for OSV:CVE-2021-4120

cve1 cvelist1 prion1 debiancve1 nvd1 ubuntucve1 cnvd1 veracode1 fedora2 openvas6 redos1 altlinux1 ubuntu4 osv4 nessus3