snapd vulnerabilities and fixes

Recent CVEs affecting snapd, with upgrade or downgrade steps. 17 tracked.

snapd has 17 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 17. Most recent: 2024-07-25. Highest priority: CVE-2019-7304 (score 74/100).

• CVE-2024-5138 HIGH 8.1 UPGRADE The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain pr
• CVE-2024-29069 MEDIUM 4.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extract
• CVE-2024-29068 MEDIUM 5.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap
• CVE-2024-1724 MEDIUM 6.3 UPGRADE In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to
• CVE-2023-1523 CRITICAL 10.0 UPGRADE MITIGATE Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling te
• CVE-2022-3328 HIGH 7.8 UPGRADE MITIGATE Race condition in snap-confine's must_mkdir_and_open_with_perms()
• CVE-2021-4120 HIGH 8.2 UPGRADE MITIGATE snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in t
• CVE-2021-44731 HIGH 7.8 UPGRADE MITIGATE A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for
• CVE-2021-44730 HIGH 7.8 UPGRADE MITIGATE snapd 2.54.2 did not properly validate the location of the snap-confine binary
• CVE-2021-3155 LOW 3.8 UPGRADE MITIGATE snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only per
• CVE-2020-27352 CRITICAL 9.3 UPGRADE MITIGATE When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specif
• CVE-2020-11933 HIGH 7.3 UPGRADE MITIGATE cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on ev
• CVE-2019-7304 CRITICAL 9.8 UPGRADE MITIGATE Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to r
• CVE-2019-7303 HIGH 7.5 UPGRADE MITIGATE A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to i
• CVE-2019-11503 HIGH 7.5 UPGRADE snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir()
• CVE-2019-11502 HIGH 7.5 UPGRADE snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of th
• CVE-2017-14178 HIGH 7.5 UPGRADE In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments

FAQ

How do I fix snapd vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is snapd being exploited right now?

None of the tracked snapd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which snapd CVE should I patch first?

CVE-2019-7304 currently ranks highest (74/100): Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to r.

RSS feed for snapd · ← Back to latest CVEs