Lucene search
Veracode Vulnerability DatabaseVERACODE:34275HistoryFeb 18, 2022 - 7:02 a.m.
Privilege Escalation
2022-02-1807:02:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
28
privilege escalation
github
snapd
EPSS
0
Percentile
5.1%
github.com/snapcore/snapd is vulnerable to privilege escalation. The sc_open_snapd_tool function of tool.c does not properly validate the location of the snap-confine binary, allowing an attacker to hardlink setuid binaries to another location when fs.protected_hardlinks is 0.
References
www.openwall.com/lists/oss-security/2022/02/18/2
www.openwall.com/lists/oss-security/2022/02/23/1
github.com/snapcore/snapd/commit/54e71e7750f73a28f5a47fe04dd058360e24c0e9
lists.fedoraproject.org/archives/list/[email protected]/message/3QTBN7LLZISXIA4KU4UKDR27Q5PXDS2U/
lists.fedoraproject.org/archives/list/[email protected]/message/XCGHG6LJAVJJ72TMART6A7N4Z6MSTGI7/
ubuntu.com/security/notices/USN-5292-1
www.debian.org/security/2022/dsa-5080
Related
osv
osv
CVE-2021-44730
2022-02-17 23:15:07
snapd - security update
2022-02-18 00:00:00
snapd vulnerabilities
2022-02-17 17:24:49
cnvd
cnvd
Unspecified vulnerability in snapd
2022-02-18 00:00:00
cve
cve
CVE-2021-44730
2022-02-17 23:15:07
nvd
nvd
CVE-2021-44730
2022-02-17 23:15:07
cvelist
cvelist
debiancve
debiancve
CVE-2021-44730
2022-02-17 23:15:07
ubuntucve
ubuntucve
CVE-2021-44730
2022-02-17 00:00:00
prion
prion
Privilege escalation
2022-02-17 23:15:00
openvas
openvas
Debian: Security Advisory (DSA-5080-1)
2022-02-22 00:00:00
Fedora: Security Advisory for snapd (FEDORA-2022-5df8b52ba4)
2022-02-20 00:00:00
Fedora: Security Advisory for snapd (FEDORA-2022-82bea71e5a)
2022-02-20 00:00:00
debian
debian
[SECURITY] [DSA 5080-1] snapd security update
2022-02-18 19:03:16
nessus
nessus
Debian DSA-5080-1 : snapd - security update
2022-02-21 00:00:00
Ubuntu 20.04 LTS : snapd vulnerabilities (USN-5292-2)
2022-02-18 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : snapd regression (USN-5292-4)
2022-02-22 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: snapd-2.54.3-1.fc34
2022-02-20 00:42:32
[SECURITY] Fedora 35 Update: snapd-2.54.3-1.fc35
2022-02-20 01:12:59
redos
redos
ROS-20220304-01
2022-03-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package snapd version 2.54.3-alt1
2022-04-26 00:00:00
ubuntu
ubuntu
snapd vulnerabilities
2022-02-18 00:00:00
snapd vulnerabilities
2022-02-17 00:00:00
snapd regression
2022-02-24 00:00:00
qualysblog
qualysblog
thn
thn
New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
2022-02-18 08:37:00