Vulnerabilitymedium
CVE-2021-44731 Linux privilege escalation bug affects Canonical's Snap Package Manager
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-3996+1 related CVE | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem | 5.5 | <1% | PoC | |
| CVE-2021-3997 | systemd: An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are… | 5.5 | 2% | PoC | |
CVE-2021-3999+1 related CVE | glibc: An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A… | 7.8 group max | <1% | PoC | |
CVE-2021-44730+1 related CVE | snapd 2.54.2 did not properly validate the location of the snap-confine binary | 8.8 group max | <1% |
From the original article
1 min read at securityaffairs.com
Qualys experts found a new Linux privilege escalation vulnerability, tracked as CVE-2021-44731, in Canonical’s Snap Package Manager. Canonical’s Snap software packaging and deployment system are affected by multiple vulnerabilities, including a privilege escalation flaw tracked as CVE-2021-44731 (CVSS score 7. 8).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.