snapd Race Condition vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-3328 · ADVISORY
• snapcore/snapd#12380 · WEB
• snapcore/snapd commit 21ebc51 · WEB
• snapcore/snapd commit 6226cdc · WEB
• cve.mitre.org/cgi-bin/cvename.cgi · WEB
• snapcore/snapd · PACKAGE
• ubuntu.com/security/notices/USN-5753-1 · WEB
• GitHub Advisory GHSA-cjqf-877p-7m3f · ADVISORY

Lỗ hổng khác của github.com/snapcore/snapd

• CVE-2024-29069CAO 7.3In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format i…
• CVE-2024-29068TRUNG BÌNH 6.6In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-sys…
• CVE-2024-1724CAO 8.2In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/b…
• CVE-2024-5138CAO 8.1The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of …