CVE-2021-3155: falha de baixa gravidade em Canonical Ltd. snapd
snapd created ~/snap with too-wide permissions
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 0.3%
snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
Canonical Ltd. · snapdCVEs relacionadas — Canonical Ltd. snapd
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1523CRITICALCVE-2023-1523EPSS 1.4%CVE-2021-44731HIGHsnapd could be made to escalate privileges and run programs as administratorEPSS 1.0%CVE-2024-5138HIGHCVE-2024-5138EPSS 0.8%CVE-2021-4120HIGHsnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsEPSS 0.4%CVE-2022-3328HIGHCVE-2022-3328EPSS 0.4%CVE-2021-44730HIGHsnapd could be made to escalate privileges and run programs as administratorEPSS 0.4%