PT-2024-6102 · Canonical+4 · Snapd+5

Zeyad Gouda · Published 2024-03-14 · Updated 2025-01-13 · CVE-2024-29068

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions snapd versions prior to 2.62

Description The issue is related to the improper checking of file types when extracting a snap. The snap format, being a squashfs file-system image, can contain non-regular files such as pipes or sockets. When snapd extracts a snap, it directly reads various file entries, including icons, from the snap squashfs image. An attacker could exploit this by convincing a user to install a malicious snap containing non-regular files at specific paths, causing snapd to block indefinitely and resulting in a denial of service.

Recommendations For snapd versions prior to 2.62, update to version 2.62 or later to resolve the issue. As a temporary workaround, consider restricting the installation of snaps from untrusted sources to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2024-13230

BDU:2024-07012

CVE-2024-29068

GHSA-64JH-CJWC-W8Q6

GO-2024-3008

USN-6940-1

USN-6940-2

Affected Products

Alt Linux

Debian

Linuxmint

Red Os

Ubuntu

Snapd

References · 26

• https://github.com/snapcore/snapd/pull/13682 · Patch
• https://github.com/snapcore/snapd/commit/b66fee81606a1c05f965a876ccbaf44174194063 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-29068 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-29068 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-29068 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-3008 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07012 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-29068 · Security Note
• https://ubuntu.com/security/CVE-2024-29069 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-64jh-cjwc-w8q6 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6940-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-29068 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29068 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-29068 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-1724 · Vendor Advisory