Aller au contenu
en Se connecter
7.8 Élevée

CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap

Description

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

Produits et versions touchés

Produit Versions touchées Corrigé en
snapd 2.54 premières → 2.54.2 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de snapd

Les 8 CVE de snapd →
CVE-2020-27352 When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify… 9.3 Critique CVE-2024-5138 The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged… 8.1 Élevée CVE-2022-3328 Race condition in snap-confine's must_mkdir_and_open_with_perms() 7.8 Élevée CVE-2023-1523 Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal… 10.0 Critique
Suivre cette CVE