CVE-2019-7304 Local privilege escalation via snapd socket
An attacker can exploit snapd socket validation flaws to execute arbitrary commands as root, leading to local privilege escalation on Linux systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-7304?
CVE-2019-7304 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 23 Apr 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
Weakness: CWE-863
Which versions are affected by CVE-2019-7304?
It affects 2 products.
Products include Canonical Snapd, Canonical Ubuntu Linux.
How do I fix CVE-2019-7304?
Upgrade to a fixed version.
Is CVE-2019-7304 being exploited?
There is no known exploitation of CVE-2019-7304 in the wild and no public exploit code.
Public exploit code: 2 Exploit-DB entries and 5 proofs of concept on GitHub.
Other vulnerabilities in Canonical Ubuntu Linux
- CVE-2023-1523 Command injection in snapd
- CVE-2020-27352 Privilege escalation in snapd
- CVE-2021-4120 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
- CVE-2024-5138 CVE-2024-5138: snapd snapctl auth bypass
- CVE-2022-3328 snapd Race Condition vulnerability
Sources
Also known as DEBIAN-CVE-2019-7304, GHSA-jvm5-cj73-m9qg, UBUNTU-CVE-2019-7304, USN-3887-1.