Home

CVE-2021-44731

Description

A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snaps private mount namespace and causing snap-confine to execute arbitrary code and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.304

Associated Vulnerability

VulnerabilityOS Platform
snapd security update(DSA-5080-1) snapd_2.49-1+deb11u1_amd64.debLinux
snapd security update(DSA-5080-1) snapd_2.37.4-1+deb10u1_i386.debLinux
snapd security update(DSA-5080-1) snapd_2.37.4-1+deb10u1_amd64.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snapd_2.54.3+18.04_i386.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snapd_2.54.3+18.04_amd64.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snapd_2.54.3+21.10.1_amd64.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snap-confine_2.54.3+18.04_i386.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snap-confine_2.54.3+18.04_amd64.debLinux
Daemon and tooling that enable snap packages (USN-5292-1) snap-confine_2.54.3+21.10.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234