CVE catalog

CVE-2021-44730

snapd affected and fixed versions

snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause snap-confine to execute other arbitrary binaries and hence gain privilege escalation. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

Severity: High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Jan 1, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.35% · Oct 27, 2026

Projects and upstream resources

[snapd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2021-44730]
Debiantrixie	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debiantrixie	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2021-44730]
Debiansid	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debiansid	snapd	`2.77.1-2`	Fixed	[CVE-2021-44730]
Debianforky	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debianforky	snapd	`2.77.1-2`	Fixed	[CVE-2021-44730]
Debianbookworm-security	snapd	`2.57.6-1+deb12u1`	Fixed	[CVE-2021-44730]
Debianbookworm	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debianbookworm	snapd	`2.57.6-1+deb12u1`	Fixed	[CVE-2021-44730]

Showing 10 fix observations. All 110 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	snapd	`2.54.3-1`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debianbookworm	snapd	`2.57.6-1+deb12u1`	Fixed	[CVE-2021-44730]
Debianbookworm-security	snapd	`2.57.6-1+deb12u1`	Fixed	[CVE-2021-44730]
Debianforky	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debianforky	snapd	`2.77.1-2`	Fixed	[CVE-2021-44730]
Debiansid	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debiansid	snapd	`2.77.1-2`	Fixed	[CVE-2021-44730]
Debiantrixie	snapd	`2.54.3-1`	FixedDistribution-reported fixed boundary	[CVE-2021-44730]
Debiantrixie	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2021-44730]
Debiantrixie-security	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2021-44730]
Ubuntu18.04	snapd	`2.28.5+17.10`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.29.4.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.29.4.2+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.31.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32+18.04~pre5`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32+18.04~pre6`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32.3.2+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32.5+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32.8+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.32.9+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.33.1+18.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.34.2+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.34.2+18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.37.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.37.1.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.37.4+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.37.4+18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.38+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.39.2+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.40+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.42.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.45.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.45.1+18.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.46.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.47.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.48+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.48.3+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.49.2+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.51.1+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.54.2+18.04ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu18.04	snapd	`2.54.3+18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.41+19.10.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.42.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.43.3+git1.8109f8`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.44+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.44.2+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.44.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.44~pre1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.45.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.45.1+20.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.46.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.47.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.48+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.48.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.49.2+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.51.1+20.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.54.2+20.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.54.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntu20.04	snapd	`2.54.3+20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`1.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`1.9.1.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`1.9.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.10`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.8`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.0.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.11+0.16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.12+0.16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.13`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.14.2~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.15.2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.16ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.17.1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.20.1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.21`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.22.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.22.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.22.6`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.23.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.24.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.25`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.26.10`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.27.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.28.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.29.4.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.32.3.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.32.9`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.33.1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.34.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.34.2ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.37.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.37.4ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.38`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.39.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.39.2ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.40`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.42.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.45.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.45.1ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.46.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.47.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.48`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.48.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC
Ubuntupro	snapd	`2.54.3+16.04~esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2021-44730]Feb 4, 2026, 4:01:21 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "snapd",
      "status": "fixed",
      "release": "sid",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "forky",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.57.6-1+deb12u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.57.6-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.54.3-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.54.3-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.54.3-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.54.3-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "snapd",
      "fixed_version": "2.54.3-1",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.3+16.04~esm2"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.9",
        "1.9.1.1",
        "1.9.2",
        "2.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.0.5",
        "2.0.8",
        "2.0.9",
        "2.0.10",
        "2.11+0.16.04",
        "2.12+0.16.04",
        "2.13",
        "2.14.2~16.04",
        "2.15.2ubuntu1",
        "2.16ubuntu3",
        "2.17.1ubuntu1",
        "2.20.1ubuntu1",
        "2.21",
        "2.22.2",
        "2.22.3",
        "2.22.6",
        "2.23.1",
        "2.24.1",
        "2.25",
        "2.26.10",
        "2.27.5",
        "2.28.5",
        "2.29.4.2",
        "2.32.3.2",
        "2.32.9",
        "2.33.1ubuntu2",
        "2.34.2",
        "2.34.2ubuntu0.1",
        "2.37.4",
        "2.37.4ubuntu0.1",
        "2.38",
        "2.39.2",
        "2.39.2ubuntu0.2",
        "2.40",
        "2.42.1",
        "2.45.1",
        "2.45.1ubuntu0.2",
        "2.46.1",
        "2.47.1",
        "2.48",
        "2.48.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-44730",
      "fixed_version": "2.54.3+16.04~esm2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-44730",
      "provider_updated_at": "2026-02-04T04:01:21.940662Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.3+18.04"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.28.5+17.10",
        "2.29.4.1+18.04",
        "2.29.4.2+18.04",
        "2.31.1+18.04",
        "2.32+18.04~pre5",
        "2.32+18.04~pre6",
        "2.32+18.04",
        "2.32.3.2+18.04",
        "2.32.5+18.04",
        "2.32.8+18.04",
        "2.32.9+18.04",
        "2.33.1+18.04ubuntu2",
        "2.34.2+18.04",
        "2.34.2+18.04.1",
        "2.37.1+18.04",
        "2.37.1.1+18.04",
        "2.37.4+18.04",
        "2.37.4+18.04.1",
        "2.38+18.04",
        "2.39.2+18.04",
        "2.40+18.04",
        "2.42.1+18.04",
        "2.45.1+18.04",
        "2.45.1+18.04.2",
        "2.46.1+18.04",
        "2.47.1+18.04",
        "2.48+18.04",
        "2.48.3+18.04",
        "2.49.2+18.04",
        "2.51.1+18.04",
        "2.54.2+18.04ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-44730",
      "fixed_version": "2.54.3+18.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-44730",
      "provider_updated_at": "2026-02-04T04:01:21.940662Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.54.3+20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.41+19.10.1",
        "2.42.1+20.04",
        "2.43.3+git1.8109f8",
        "2.44~pre1+20.04",
        "2.44+20.04",
        "2.44.2+20.04",
        "2.44.3+20.04",
        "2.45.1+20.04",
        "2.45.1+20.04.2",
        "2.46.1+20.04",
        "2.47.1+20.04",
        "2.48+20.04",
        "2.48.3+20.04",
        "2.49.2+20.04",
        "2.51.1+20.04ubuntu2",
        "2.54.2+20.04ubuntu2",
        "2.54.3+20.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-44730",
      "fixed_version": "2.54.3+20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-44730",
      "provider_updated_at": "2026-02-04T04:01:21.940662Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[golang-github-snapcore-snapd-dev]Unknown
Source package: [snapd]
Details (4)
- 2.57.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[snap-confine]Unknown
Source package: [snapd]
Details (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[snapd]Unknown
Details (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[ubuntu-core-launcher]Unknown
Source package: [snapd]
Details (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

[Debian 13 (Trixie)]

[golang-github-snapcore-snapd-dev]Unknown
Source package: [snapd]
Details (4)
- 2.68.3-3+deb13u1 · all · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
[snap-confine]Unknown
Source package: [snapd]
Details (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
[snapd]Unknown
Details (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
[ubuntu-core-launcher]Unknown
Source package: [snapd]
Details (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 2.54.3-1
  dsa · snapd · debian · 13

Observed: Oct 23, 2026, 6:03:46 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]