snapctl Argument Parsing Flaw Enables Unprivileged Privilege Escalation
CVE-2024-5138 Published on May 31, 2024
The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap. It was found that snapctl did not properly parse command-line arguments, allowing an unprivileged user to trigger an authorised action on behalf of the snap that would normally require administrator privileges to perform. This could possibly allow an unprivileged user to perform a denial of service or similar.
Vulnerability Analysis
CVE-2024-5138 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2024-5138. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity and availability.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2024-5138
Want to know whenever a new CVE is published for Canonical Snapd? stack.watch will email you.
Affected Versions
Canonical Ltd. snapd:- Before 68ee9c6aa916ab87dbfd9a26030690f2cabf1e14 is affected.
- Before 68ee9c6aa916ab87dbfd9a26030690f2cabf1e14 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.