PT-2022-1908 · Canonical+3 · Snapd+4

Ian Johnson · Published 2022-02-17 · Updated 2022-04-26 · CVE-2021-4120

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions snapd versions 2.54.2

Description The issue is related to insufficient validation of input data in the snapd utility, which can allow an attacker to elevate privileges in the system and execute arbitrary code by injecting arbitrary AppArmor policy rules via malformed content interface and layout declarations. This can lead to escaping strict snap confinement.

Recommendations For snapd version 2.54.2, update to version 2.54.3+18.04, 2.54.3+20.04, or 2.54.3+21.10.1 to resolve the issue. As a temporary workaround, consider restricting the use of the snap content interface and layout declarations to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2022-1345

ALT-PU-2022-1765

BDU:2022-01444

CVE-2021-4120

USN-5292-1

USN-5292-2

USN-5292-3

USN-5292-4

Affected Products

Alt Linux

Linuxmint

Red Os

Ubuntu

Snapd

References · 31

• 🔥 https://bugs.launchpad.net/snapd/+bug/1949368 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2022/02/18/2 · Exploit
• https://bdu.fstec.ru/vul/2022-01444 · Security Note
• https://osv.dev/vulnerability/USN-5292-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4120 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5292-3 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5292-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4120 · Security Note
• https://ubuntu.com/security/notices/USN-5292-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGHG6LJAVJJ72TMART6A7N4Z6MSTGI7 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-4120 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTBN7LLZISXIA4KU4UKDR27Q5PXDS2U · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4120 · Security Note
• https://ubuntu.com/security/notices/USN-5292-1 · Vendor Advisory