CVE-2021-44731 2

Vulnerability (CVE)

Oh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731) | Qualys

The Qualys Research Team discovered multiple vulnerabilities in snap-confine, the program snapd uses to build the execution environment for sandboxed snap applications on Linux, the most important tracked as CVE-2021-44731. Qualys researchers verified the...

Vulnerabilities & Patching

Snapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328) | Qualys

Cyber Risks Qualys Blog

Qualys Threat Research Unit discovered CVE-2022-3328, a race condition in snap-confine, a SUID-root program installed by default on Ubuntu, introduced in February 2022 by the patch for CVE-2021-44731. Qualys exploited it on Ubuntu Server by chaining it...

Vulnerabilities & Patching