Lucene search
+L

CVE-2021-44730

🗓️ 17 Feb 2022 22:15:18Reported by canonicalType 
cve
 cve
🔗 web.nvd.nist.gov👁 204 Views

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
altlinux
ALT Linux
Security fix for the ALT Linux 10 package snapd version 2.54.3-alt1
26 Apr 202200:00
–altlinux
attackerkb
attackerkb
CVE-2021-44730
17 Feb 202223:15
–attackerkb
bdu_fstec
BDU FSTEC
snapd Hard Link Privilege Escalation
25 Mar 202200:00
–bdu_fstec
circl
Circl
CVE-2021-44730
8 Jul 202611:11
–circl
cnnvd
CNNVD
Snapd backend link vulnerability
17 Feb 202200:00
–cnnvd
cnvd
CNVD
Unspecified vulnerability in snapd
18 Feb 202200:00
–cnvd
cvelist
Cvelist
CVE-2021-44730 snapd could be made to escalate privileges and run programs as administrator
17 Feb 202222:15
–cvelist
debian
Debian
[SECURITY] [DSA 5080-1] snapd security update
18 Feb 202219:03
–debian
debiancve
Debian CVE
CVE-2021-44730
17 Feb 202222:15
–debiancve
nessus
Tenable Nessus
Debian DSA-5080-1 : snapd - security update
21 Feb 202200:00
–nessus
Rows per page
NVD
Node
canonicalsnapdRange≤2.54.2
Node
Node
[
  {
    "product": "snapd",
    "vendor": "Canonical Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "2.54.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation