Fedora EPEL 9 update for snapd
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2021-44731 CVE-2021-44730 CVE-2021-4120 |
| CWE-ID | CWE-362 CWE-62 CWE-20 |
| Exploitation vector | Local |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software |
Fedora Operating systems & Components / Operating system snapd Operating systems & Components / Operating system package or component |
| Vendor | Fedoraproject |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Race condition
EUVDB-ID: #VU60743
Risk: Low
CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2021-44731
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition in the snap-confine binary when preparing a private mount namespace for a snap.. A local user can bind-mount their own contents inside the snap's private mount namespace and execute arbitrary code with root privileges.
Install updates from vendor's repository.
Vulnerable software versionsFedora: 9
snapd: before 2.54.3-1.el9
CPE2.3 External linkshttps://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-19187e8443
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
2) UNIX hardlink following
EUVDB-ID: #VU60742
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-44730
CWE-ID:
CWE-62 - UNIX Hard Link
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a hardlink following issue within the the snap-confine binary. A local user can create a hardlink to system binaries and execute them with elevated privileges.
Install updates from vendor's repository.
Vulnerable software versionsFedora: 9
snapd: before 2.54.3-1.el9
CPE2.3 External linkshttps://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-19187e8443
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Input validation error
EUVDB-ID: #VU60744
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-4120
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of snap content interface and layout paths. A local user can inject arbitrary AppArmor policy rules via malformed content interface and layout declarations and execute arbitrary code with elevated privileges.
Install updates from vendor's repository.
Vulnerable software versionsFedora: 9
snapd: before 2.54.3-1.el9
CPE2.3 External linkshttps://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-19187e8443
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
