CVE-2021-3155 snapd created ~/snap with too-wide permissions
Local attackers can read private information from snap directories due to overly permissive default permissions in snapd.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-3155?
CVE-2021-3155 is a low-severity vulnerability in Canonical Ubuntu Linux, published on 17 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
Weakness: CWE-276
Which versions are affected by CVE-2021-3155?
It affects 2 products.
Products include Canonical Snapd, Canonical Ubuntu Linux.
How do I fix CVE-2021-3155?
Upgrade to a fixed version.
Is CVE-2021-3155 being exploited?
There is no known exploitation of CVE-2021-3155 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
- CVE-2023-1523 Command injection in snapd
- CVE-2020-27352 Privilege escalation in snapd
- CVE-2019-7304 Local privilege escalation via snapd socket
- CVE-2021-4120 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
- CVE-2024-5138 CVE-2024-5138: snapd snapctl auth bypass
Sources
Also known as DEBIAN-CVE-2021-3155, GHSA-7x7f-q6wr-wc4w, UBUNTU-CVE-2021-3155.