Debian DSA-5292-1 : snapd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5292 advisory. The Qualys Research Team discovered a race condition in the snapd-confine binary which could result in local privilege escalation. For the stable distribution bullseye, th...

Ubuntu: Security Advisory (USN-5753-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5292-1] snapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5292-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 01, 2022 https://www.debian.org/security/faq -...

Exploit for Race Condition in Canonical Snapd

CVE-2022-3328 CVE-2022-3328 with CVE-2022-41974 and CVE...

USN-5753-1 snapd vulnerability

The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private /tmp mount for a snap. A local attacker could possibly use this issue to escalate privileges and execute arbitrary code...

snapd 竞争条件问题漏洞

snapd is an open source, cross-platform package management tool. snapd suffers from a compete condition issue vulnerability that stems from a compete condition occurring in the snapd snap- restrict binary when it prepares a private /tmp mount causing a local attacker to potentially elevate...

DSA-5292-1 snapd - security update

Bulletin has no description...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : snapd vulnerability (USN-5753-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5753-1 advisory. The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private...

Snapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328)

The Qualys Threat Research Unit TRU has discovered a new vulnerability in snap-confine function on Linux operating systems, a SUID-root program installed by default on Ubuntu. Qualys recommends that security teams apply the patch for this vulnerability as soon as possible. In February 2022, Qualy...

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

Ubuntu: Security Advisory (USN-5292-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for snapd (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for snapd (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for snapd (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for snapd (FEDORA-2022-9986fbb3d7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-44731

A race condition vulnerability in the snap-confine component setupprivatemount of snapd was found by Qualys. This flaw could lead to local privilege escalation from any user to root...

Security fix for the ALT Linux 10 package snapd version 2.54.3-alt1

2.54.3-alt1 built April 26, 2022 Andrey Cherepanov in task 299035 --- Feb. 20, 2022 Alexey Shabalin - 2.54.3 Fixes: CVE-2021-44730, CVE-2021-44731, CVE-2021-4120...

The vulnerability of the snapd package management tool, related to hard link errors, allows a perpetrator to escalate their privileges.

The vulnerability of the ductile management for self-contained packages in Snapd is related to errors in hard links. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the snapd package management tool, related to multi-threaded task execution errors, allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the snapd package management tool is related to errors in multi-threaded tasks. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

The vulnerability of the snapd package management tool, related to insufficient input data validation, allows a perpetrator to enhance their privileges within the system and execute arbitrary code.

The vulnerability of the snapd package management tool is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges within the system and execute arbitrary code by introducing arbitrary AppArmor policy rules through modified...