Поиск уязвимостей
Количество 8
Количество 8
BDU:2022-01445
Уязвимость утилиты для управления самодостаточными пакетами snapd, связанная с ошибками выполнения многопоточных задач, позволяющая нарушителю выполнить произвольный код с привилегиями root
ROS-20220304-01
Множественные уязвимости snapd
ALT-PU-2022-1765
ALT-PU-2022-1765: package `snapd` update to version 2.54.3-alt1
ALT-PU-2022-1345
ALT-PU-2022-1345: package `snapd` update to version 2.54.3-alt1
CVE-2021-44731
A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
CVE-2021-44731
A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
CVE-2021-44731
A race condition existed in the snapd 2.54.2 snap-confine binary when ...
GHSA-m3j9-xfh2-hrgc
A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2022-01445 Уязвимость утилиты для управления самодостаточными пакетами snapd, связанная с ошибками выполнения многопоточных задач, позволяющая нарушителю выполнить произвольный код с привилегиями root | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад | |
ROS-20220304-01 Множественные уязвимости snapd | больше 4 лет назад | |||
ALT-PU-2022-1765 ALT-PU-2022-1765: package `snapd` update to version 2.54.3-alt1 | CVSS3: 8.8 | больше 4 лет назад | ||
ALT-PU-2022-1345 ALT-PU-2022-1345: package `snapd` update to version 2.54.3-alt1 | CVSS3: 8.8 | больше 4 лет назад | ||
CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1 | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад | |
CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1 | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад | |
CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when ... | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад | |
GHSA-m3j9-xfh2-hrgc A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1 | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу