Vulnerabilities

TI-2021-02996 CVE-2021-4120 · GHSA-hfvx-54vj-h9wq

snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths

LOW 36

snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layout decl…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00437 Published 2022-02-17 No fix listed CWE-20

TI-2021-20244 CVE-2021-44730 · GHSA-f6xc-44hh-rf46

snapd could be made to escalate privileges and run programs as administrator

LOW 38

snapd 2.54.2 did not properly validate the location of the snap-confine binary.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00351 Published 2022-02-17 No fix listed CWE-59

TI-2021-20245 CVE-2021-44731 · GHSA-m3j9-xfh2-hrgc

snapd could be made to escalate privileges and run programs as administrator

LOW 36

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00952 Published 2022-02-17 No fix listed CWE-362

Vulnerabilities

Filters

snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths

snapd could be made to escalate privileges and run programs as administrator

snapd could be made to escalate privileges and run programs as administrator