Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhhq-qgvm-w5hp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

EPSS

Процентиль: 78%
0.01122
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

CVSS3: 7.5
nvd
почти 7 лет назад

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

CVSS3: 7.5
debian
почти 7 лет назад

A vulnerability in the seccomp filters of Canonical snapd before versi ...

CVSS3: 3.3
fstec
около 7 лет назад

Уязвимость утилиты для управления самодостаточными пакетами snapd, связанная с небезопасным управлением привилегиями, позволяющая нарушителю обойти существующие ограничения доступа

EPSS

Процентиль: 78%
0.01122
Низкий