CVE-2021-44730 snapd could be made to escalate privileges and run programs as administrator
A local attacker can exploit improper validation of the snap-confine binary location to execute arbitrary programs with administrator privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-44730?
CVE-2021-44730 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 17 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
Weakness: CWE-59
Which versions are affected by CVE-2021-44730?
It affects 4 products.
Products include Canonical Snapd, Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora.
How do I fix CVE-2021-44730?
Upgrade to a fixed version.
Is CVE-2021-44730 being exploited?
There is no known exploitation of CVE-2021-44730 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
- CVE-2023-1523 Command injection in snapd
- CVE-2020-27352 Privilege escalation in snapd
- CVE-2019-7304 Local privilege escalation via snapd socket
- CVE-2021-4120 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
- CVE-2024-5138 CVE-2024-5138: snapd snapctl auth bypass
Sources
Also known as DEBIAN-CVE-2021-44730, GHSA-f6xc-44hh-rf46, UBUNTU-CVE-2021-44730.