Lucene search

K
osvGoogleOSV:CVE-2021-44730
HistoryFeb 17, 2022 - 11:15 p.m.

CVE-2021-44730

2022-02-1723:15:07
Google
osv.dev
10
snapd
privilege escalation
vulnerability
fixed
software

AI Score

8.7

Confidence

High

EPSS

0

Percentile

5.1%

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1