CVE-2024-1724: canonical snap

Vulnerability summary

CVE-2024-1724 is a high (CVSS 8.2) vulnerability in canonical snap. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 21.9% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 25-07-2024
   PublishedVulnerability first disclosed.
2. 01-08-2024
   Last modifiedVulnerability information updated.

Description

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home' plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run by the user outside of the expected snap sandbox and hence allow them to escape confinement.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.