CVE-2019-7303 Snapd seccomp filter TIOCSTI ioctl bypass
A flaw in snapd's seccomp filters allows strict mode snaps to bypass terminal restrictions and inject characters into the host terminal.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-7303?
CVE-2019-7303 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 23 Apr 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.
Weakness: CWE-628
Which versions are affected by CVE-2019-7303?
It affects 2 products.
Products include Canonical Snapd, Canonical Ubuntu Linux.
How do I fix CVE-2019-7303?
Upgrade to a fixed version.
Is CVE-2019-7303 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-7303 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Canonical Ubuntu Linux
- CVE-2023-1523 Command injection in snapd
- CVE-2020-27352 Privilege escalation in snapd
- CVE-2019-7304 Local privilege escalation via snapd socket
- CVE-2021-4120 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
- CVE-2024-5138 CVE-2024-5138: snapd snapctl auth bypass
Sources
Also known as DEBIAN-CVE-2019-7303, GHSA-hhhq-qgvm-w5hp, UBUNTU-CVE-2019-7303, USN-3917-1.