Lucene search

CVE-2021-44731

🗓️ 17 Feb 2022 23:07:15Reported by [email protected]Type

Race condition in snapd 2.54.2 allowing local attacker to gain root privilege

Reporter	Title	Published	Views	Family All 44
Hive Pro Threat Advisories	Privilege Escalation Vulnerability in Snap Package Manager puts Linux users at risk	21 Feb 202204:34	–	hivepro
Debian CVE	CVE-2021-44731	17 Feb 202223:15	–	debiancve
OSV	CVE-2021-44731	17 Feb 202223:15	–	osv
OSV	snapd - security update	18 Feb 202200:00	–	osv
OSV	snapd vulnerabilities	17 Feb 202217:24	–	osv
OSV	snapd vulnerabilities	18 Feb 202201:07	–	osv
OSV	snapd vulnerabilities	18 Feb 202202:21	–	osv
OSV	snapd regression	24 Feb 202213:23	–	osv
Cvelist	CVE-2021-44731 snapd could be made to escalate privileges and run programs as administrator	17 Feb 202200:00	–	cvelist
Prion	Race condition	17 Feb 202223:15	–	prion

Nvd

Node

canonical snapdRange≤2.54.2

Node

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch20.04lts

canonical ubuntu_linuxMatch21.10

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/02/23/2
openwall	www.openwall.com/lists/oss-security/2022/02/23/1
ubuntu	www.ubuntu.com/security/notices/USN-5292-1
debian	www.debian.org/security/2022/dsa-5080
packetstormsecurity	www.packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTBN7LLZISXIA4KU4UKDR27Q5PXDS2U/
seclists	www.seclists.org/fulldisclosure/2022/Dec/4
openwall	www.openwall.com/lists/oss-security/2022/11/30/2
openwall	www.openwall.com/lists/oss-security/2022/02/18/2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGHG6LJAVJJ72TMART6A7N4Z6MSTGI7/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Feb 2022 23:15Current

CVSS26.9

CVSS37.8

EPSS0.001

CWE-362