Lucene search

CVE-2024-29069 snapd will follow archived symlinks when unpacking a filesystem

🗓️ 25 Jul 2024 19:41:39Reported by canonicalType

snapd CVE-2024-29069 symlink vulnerabilit

Reporter	Title	Published	Views	Family All 21
OSV	GHSA-69P6-GP5X-J269 snapd failed to properly check the destination of symbolic links when extracting a snap	25 Jul 202421:31	–	osv
OSV	CVE-2024-29069	25 Jul 202420:15	–	osv
OSV	GO-2024-3009 snapd failed to properly check the destination of symbolic links when extracting a snap in github.com/snapcore/snapd	6 Aug 202422:03	–	osv
OSV	USN-6940-2 snapd vulnerabilities	13 Jan 202510:16	–	osv
OSV	USN-6940-1 snapd vulnerabilities	1 Aug 202406:35	–	osv
Vulnrichment	CVE-2024-29069 snapd will follow archived symlinks when unpacking a filesystem	25 Jul 202419:39	–	vulnrichment
CVE	CVE-2024-29069	25 Jul 202420:15	–	cve
RedhatCVE	CVE-2024-29069	26 Jul 202410:01	–	redhatcve
UbuntuCve	CVE-2024-29069	14 Mar 202400:00	–	ubuntucve
NVD	CVE-2024-29069	25 Jul 202420:15	–	nvd

[
  {
    "vendor": "Canonical",
    "product": "snapd",
    "platforms": [
      "Linux"
    ],
    "packageName": "snapd",
    "repo": "https://github.com/snapcore/snapd/",
    "modules": [
      "squashfs"
    ],
    "programFiles": [
      "snap/container.go",
      "snap/snapdir/snapdir.go",
      "snap/squashfs/squashfs.go"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.62",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
github	www.github.com/snapcore/snapd/pull/13682

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jul 2024 19:39Current

CVSS34.8

EPSS0.00043

CWE-610