Skip to content
OpenAdvisories

Product · Canonical

snapd

14 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.8
    CVE-2022-3328 Public exploit

    snapd Race Condition vulnerability

    Race condition in snap-confine's must_mkdir_and_open_with_perms()

  • High 7.8
    CVE-2021-44731 Public exploit

    snapd could be made to escalate privileges and run programs as administrator

    A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and c…

  • High 8.8
    CVE-2019-7304 Public exploit EPSS 61%

    Local privilege escalation via snapd socket

    Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.