CVE-2021-44730
snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to c...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2021-44730 snapd Corrigé dans: 2.54.3-1
Références
- advisory openwall.com
- advisory openwall.com
- patch ubuntu.com
- report debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org