CVE-2021-44730CWE-59

snapd could be made to escalate privileges and run programs as administrator

High · published February 17, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2022-02-17T22:15Z
EPSS history
Timeline
  • 17 FEB 22:15Z
    snapd could be made to escalate privileges and run programs as administrator
    cvelistv5