Skip to content
fr Sign in
6.3 Medium

CVE-2024-1724 In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…

Description

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home' plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run by the user outside of the expected snap sandbox and hence allow them to escape confinement.

Affected products and versions

Product Affected versions Fixed in
snapd 2.62 earliest → < 2.62 2.62
snap 2.62 earliest → < 2.62 2.62

References

Timeline

  1. Published
  2. Last modified

Other CVEs of snapd

The 9 CVEs of snapd →
CVE-2024-29069 In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap 4.8 Medium CVE-2024-29068 In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap 5.8 Medium CVE-2020-27352 When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify… 9.3 Critical CVE-2024-5138 The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged… 8.1 High
Track this CVE