Skip to content
OpenAdvisories
High · 7.8 CVE-2021-44730 EUVD-2021-31545GHSA-f6xc-44hh-rf46

snapd could be made to escalate privileges and run programs as administrator

Published Feb 17, 2022 · Updated Aug 4, 2024 · Assigned by canonical

Vendor: Canonical Product: snapd Package: snapd Package: snapd Ecosystem: Debian Ecosystem: Ubuntu

Description

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

Affected products

VendorProductAffectedFixed
Canonical snapd unspecified – ≤ 2.54.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 snapd 2.54.3-1 —
Debian 13 snapd 2.54.3-1 —
Debian 12 snapd 2.54.3-1 —
Debian 11 snapd 2.49-1+deb11u1 DSA-5080-1
Debian 10 snapd 2.37.4-1+deb10u1 DSA-5080-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS snapd 2.54.3+20.04.1 USN-5292-2, USN-5292-1
Ubuntu 18.04 LTS snapd 2.54.3+18.04 USN-5292-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS snapd 2.54.3+16.04~esm2 USN-5292-3
Ubuntu Pro 14.04 LTS snapd 2.54.3+14.04~esm1 USN-5292-3

Advisories 4

References