CVE-2022-3328

HIGH

snap-confine - Buffer Overflow

Title source: llm

Description

Race condition in snap-confine's must_mkdir_and_open_with_perms()

Exploits (1)

nomisec WRITEUP 4 stars
by Mr-xn · poc
https://github.com/Mr-xn/CVE-2022-3328

References (2)

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 28.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-362
Status published

Affected Products (7)

canonical/snapd < 2.61.1
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
snapcore/snapd < 2.57.6Go

Timeline

Published Jan 08, 2024
Tracked Since Feb 18, 2026