UbuntuUSN-3917-1snapd vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.02 Low
EPSS
Percentile
88.8%
Releases
- Ubuntu 18.10
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- snapd - Daemon and tooling that enable snap packages
Details
The snapd default seccomp filter for strict mode snaps blocks the use of
the ioctl() system call when used with TIOCSTI as the second argument to
the system call. Jann Horn discovered that this restriction could be
circumvented on 64 bit architectures. A malicious snap could exploit this
to bypass intended access restrictions to insert characters into the
terminal’s input queue. On Ubuntu, snapd typically will have already
automatically refreshed itself to snapd 2.37.4 which is unaffected.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.10 | noarch | snapd | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | golang-github-snapcore-snapd-dev | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | golang-github-ubuntu-core-snappy-dev | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | snap-confine | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | snapd-dbgsym | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | snapd-xdg-open | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | ubuntu-core-launcher | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | ubuntu-core-snapd-units | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | ubuntu-snappy | < 2.37.4+18.10.1 | UNKNOWN |
| Ubuntu | 18.10 | noarch | ubuntu-snappy-cli | < 2.37.4+18.10.1 | UNKNOWN |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.6 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.02 Low
EPSS
Percentile
88.8%