Vulnerabilitycritical
New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-3996+1 related CVE | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem | 5.5 | <1% | PoC | |
| CVE-2021-3997 | systemd: An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are… | 5.5 | 2% | PoC | |
CVE-2021-3999+1 related CVE | glibc: An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A… | 7.8 group max | <1% | PoC | |
CVE-2021-44730+1 related CVE | snapd 2.54.2 did not properly validate the location of the snap-confine binary | 8.8 group max | <1% |
From the original article
2 min read at thehackernews.com
Multiple security vulnerabilities have been disclosed in Canonical's Snap software packaging and deployment system, the most critical of which can be exploited to escalate privilege to gain root privileges. Snaps are self-contained application packages that are designed to work on operating systems that use the Linux kernel and can be installed using a tool called snapd.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.