Skip to content
OpenAdvisories
Medium · 5.8 CVE-2024-29068 EUVD-2024-2275GHSA-64jh-cjwc-w8q6GO-2024-3008

snapd non-regular file indefinite blocking read

Published Jul 25, 2024 · Updated Aug 2, 2024 · Assigned by canonical

Description

In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap. The snap format is a squashfs file-system
image and so can contain files that are non-regular files (such as pipes
or sockets etc). Various file entries within the snap squashfs image
(such as icons etc) are directly read by snapd when it is extracted. An
attacker who could convince a user to install a malicious snap which
contained non-regular files at these paths could then cause snapd to block
indefinitely trying to read from such files and cause a denial of service.

Affected products

VendorProductAffectedFixed
Canonical snapd < 2.62 2.62

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 snapd 2.62-1 —
Debian 13 snapd 2.62-1 —
Debian 12 snapd No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS snapd 2.63+24.04ubuntu0.1 USN-6940-1
Ubuntu 22.04 LTS snapd 2.63+22.04ubuntu0.1 USN-6940-1
Ubuntu 20.04 LTS snapd 2.63+20.04ubuntu0.1 USN-6940-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS snapd 2.61.4ubuntu0.18.04.1+esm1 USN-6940-2
Ubuntu Pro 16.04 LTS snapd 2.61.4ubuntu0.16.04.1+esm1 USN-6940-2

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/snapcore/snapd < 2.62 2.62 GHSA-64jh-cjwc-w8q6
Go github.com/snapcore/snapd all versions — GO-2024-3008

Advisories 3

References