The vulnerability of the snapd package management tool, related to hard link errors, allows a perpetrator to escalate their privileges.

The vulnerability of the ductile management for self-contained packages in Snapd is related to errors in hard links. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the snapd package management tool, related to multi-threaded task execution errors, allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the snapd package management tool is related to errors in multi-threaded tasks. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

The vulnerability of the snapd package management tool, related to insufficient input data validation, allows a perpetrator to enhance their privileges within the system and execute arbitrary code.

The vulnerability of the snapd package management tool is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges within the system and execute arbitrary code by introducing arbitrary AppArmor policy rules through modified...

CVE-2022-27191

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey...

ROS-20220304-01

Vulnerability in snapd's snap packet management daemon, related to insufficient validation of interface snapd content and layout paths. Exploitation of the vulnerability could allow an attacker to enforce arbitrary AppArmor policy rules through a corrupted content interface and layout declaration...

USN-5292-4 snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

USN-5292-4: snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

Debian: Security Advisory (DSA-5080-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitra...

Debian DSA-5080-1 : snapd - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5080 advisory. - snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause...

Data Injection

github.com/snapcore/snapd is vulnerable to data injection. The vulnerability exists because snapd doesn't properly validate content interface and layout paths which allows an attacker to inject and execute arbitrary AppArmor policy rules...

Fedora: Security Advisory for snapd (FEDORA-2022-82bea71e5a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for snapd (FEDORA-2022-5df8b52ba4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-5292-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5080-1] snapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5080-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2022 https://www.debian.org/security/faq -...

Access Restriction Bypass

Overview Affected versions of this package are vulnerable to Access Restriction Bypass due to failure to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layou...

Access Restriction Bypass

Overview Affected versions of this package are vulnerable to Access Restriction Bypass due to failure to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layou...

Access Restriction Bypass

Overview github.com/snapcore/snapd/interfaces/builtin is a tool enabling systems to work with .snap files Affected versions of this package are vulnerable to Access Restriction Bypass due to failure to perform sufficient validation of snap content interface and layout paths, resulting in the...

Access Restriction Bypass

Overview github.com/snapcore/snapd/overlord/snapstate is an app packages for desktop, cloud and IoT that update automatically, are easy to install, secure, cross-platform and dependency-free. They're being used on millions of Linux systems every day. Affected versions of this package are vulnerab...

Privilege Escalation

github.com/snapcore/snapd is vulnerable to privilege escalation. The scopensnapdtool function of tool.c does not properly validate the location of the snap-confine binary, allowing an attacker to hardlink setuid binaries to another location when fs.protectedhardlinks is 0...