Все бюллетени/sisyphus/ALT-PU-2024-18294-1
ALT-PU-2024-18294-1

Обновление пакета snapd в ветке sisyphus

Версия2.63-alt1
Задание#351757
Опубликовано2024-06-28
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (8)

BDU:2024-06997
HIGH7.3

Уязвимость утилиты для управления самодостаточными пакетами snapd, связанная с неправильным разрешением ссылки перед доступом к файлу, позволяющая нарушителю получить доступ к конфиденциальной информации

Опубликовано: 2024-09-13
CVSS 3.xВЫСОКАЯ 7.3
CVSS:3.x/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0СРЕДНЯЯ 6.8
CVSS:2.0/AV:L/AC:L/Au:S/C:C/I:C/A:C
Ссылки
BDU:2024-07012
MEDIUM6.6

Уязвимость утилиты для управления самодостаточными пакетами snapd, связанная с неправильной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

Опубликовано: 2024-09-13
CVSS 3.xСРЕДНЯЯ 6.6
CVSS:3.x/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
CVSS 2.0СРЕДНЯЯ 6.2
CVSS:2.0/AV:L/AC:L/Au:S/C:C/I:N/A:C
Ссылки
CVE-2024-1724
HIGH8.2

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home' plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run by the user outside of the expected snap sandbox and hence allow them to escape confinement.

Опубликовано: 2024-07-25Изменено: 2024-11-21
CVSS 3.xВЫСОКАЯ 8.2
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Ссылки
CVE-2024-29068
MEDIUM6.6

In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.

Опубликовано: 2024-07-25Изменено: 2024-11-21
CVSS 3.xСРЕДНЯЯ 6.6
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Ссылки
CVE-2024-29069
HIGH7.3

In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file entries within the snap squashfs image (such as icons and desktop files etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained symbolic links at these paths could then cause snapd to write out the contents of the symbolic link destination into a world-readable directory. This in-turn could allow an unprivileged user to gain access to privileged information.

Опубликовано: 2024-07-25Изменено: 2024-11-21
CVSS 3.xВЫСОКАЯ 7.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Ссылки
GHSA-4mh8-9689-38vr
MEDIUM6.3

snapd failed to restrict writes to the $HOME/bin path

Опубликовано: 2024-07-26Изменено: 2024-08-07
CVSS 3.xСРЕДНЯЯ 6.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Ссылки
GHSA-64jh-cjwc-w8q6
MEDIUM5.8

snapd failed to properly check the file type when extracting a snap

Опубликовано: 2024-07-26Изменено: 2024-08-26
CVSS 3.xСРЕДНЯЯ 5.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:H
CVSS 4.0СРЕДНЯЯ 5.8
CVSS:4.0/CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Ссылки
GHSA-69p6-gp5x-j269
LOW2.4

snapd failed to properly check the destination of symbolic links when extracting a snap

Опубликовано: 2024-07-26Изменено: 2024-11-18
CVSS 3.xНИЗКАЯ 2.4
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 4.0НИЗКАЯ 2.4
CVSS:4.0/CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Ссылки