CVE catalog

CVE-2022-3328

snapd: CVE-2022-3328

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.38% · Oct 25, 2026

Race condition in snap-confine's must_mkdir_and_open_with_perms()

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansnapdsid2.77.1-2fixed
Debiansnapdforky2.77.1-2fixed
Debiansnapdtrixie2.68.3-3+deb13u1fixed
Debiansnapdtrixie-security2.68.3-3+deb13u1fixed
Debiansnapdbookworm2.57.6-1+deb12u1fixed
Debiansnapdbookworm-security2.57.6-1+deb12u1fixed
Ubuntusnapdpro1.9vulnerable
Ubuntusnapdpro1.9.1.1vulnerable
Ubuntusnapdpro1.9.2vulnerable
Ubuntusnapdpro2.0vulnerable
Ubuntusnapdpro2.0.1vulnerable
Ubuntusnapdpro2.0.2vulnerable
Ubuntusnapdpro2.0.3vulnerable
Ubuntusnapdpro2.0.5vulnerable
Ubuntusnapdpro2.0.8vulnerable
Ubuntusnapdpro2.0.9vulnerable
Ubuntusnapdpro2.0.10vulnerable
Ubuntusnapdpro2.11+0.16.04vulnerable
Ubuntusnapdpro2.12+0.16.04vulnerable
Ubuntusnapdpro2.13vulnerable
Ubuntusnapdpro2.14.2~16.04vulnerable
Ubuntusnapdpro2.15.2ubuntu1vulnerable
Ubuntusnapdpro2.16ubuntu3vulnerable
Ubuntusnapdpro2.17.1ubuntu1vulnerable
Ubuntusnapdpro2.20.1ubuntu1vulnerable
Ubuntusnapdpro2.21vulnerable
Ubuntusnapdpro2.22.2vulnerable
Ubuntusnapdpro2.22.3vulnerable
Ubuntusnapdpro2.22.6vulnerable
Ubuntusnapdpro2.23.1vulnerable
Ubuntusnapdpro2.24.1vulnerable
Ubuntusnapdpro2.25vulnerable
Ubuntusnapdpro2.26.10vulnerable
Ubuntusnapdpro2.27.5vulnerable
Ubuntusnapdpro2.28.5vulnerable
Ubuntusnapdpro2.29.4.2vulnerable
Ubuntusnapdpro2.32.3.2vulnerable
Ubuntusnapdpro2.32.9vulnerable
Ubuntusnapdpro2.33.1ubuntu2vulnerable
Ubuntusnapdpro2.34.2vulnerable
Ubuntusnapdpro2.34.2ubuntu0.1vulnerable
Ubuntusnapdpro2.37.4vulnerable
Ubuntusnapdpro2.37.4ubuntu0.1vulnerable
Ubuntusnapdpro2.38vulnerable
Ubuntusnapdpro2.39.2vulnerable
Ubuntusnapdpro2.39.2ubuntu0.2vulnerable
Ubuntusnapdpro2.40vulnerable
Ubuntusnapdpro2.42.1vulnerable
Ubuntusnapdpro2.45.1vulnerable
Ubuntusnapdpro2.45.1ubuntu0.2vulnerable
Ubuntusnapdpro2.46.1vulnerable
Ubuntusnapdpro2.47.1vulnerable
Ubuntusnapdpro2.48vulnerable
Ubuntusnapdpro2.48.3vulnerable
Ubuntusnapdpro2.54.3+16.04~esm2vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm3vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm4vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm5fixed
Ubuntusnapd18.042.28.5+17.10vulnerable
Ubuntusnapd18.042.29.4.1+18.04vulnerable
Ubuntusnapd18.042.29.4.2+18.04vulnerable
Ubuntusnapd18.042.31.1+18.04vulnerable
Ubuntusnapd18.042.32+18.04~pre5vulnerable
Ubuntusnapd18.042.32+18.04~pre6vulnerable
Ubuntusnapd18.042.32+18.04vulnerable
Ubuntusnapd18.042.32.3.2+18.04vulnerable
Ubuntusnapd18.042.32.5+18.04vulnerable
Ubuntusnapd18.042.32.8+18.04vulnerable
Ubuntusnapd18.042.32.9+18.04vulnerable
Ubuntusnapd18.042.33.1+18.04ubuntu2vulnerable
Ubuntusnapd18.042.34.2+18.04vulnerable
Ubuntusnapd18.042.34.2+18.04.1vulnerable
Ubuntusnapd18.042.37.1+18.04vulnerable
Ubuntusnapd18.042.37.1.1+18.04vulnerable
Ubuntusnapd18.042.37.4+18.04vulnerable
Ubuntusnapd18.042.37.4+18.04.1vulnerable
Ubuntusnapd18.042.38+18.04vulnerable
Ubuntusnapd18.042.39.2+18.04vulnerable
Ubuntusnapd18.042.40+18.04vulnerable
Ubuntusnapd18.042.42.1+18.04vulnerable
Ubuntusnapd18.042.45.1+18.04vulnerable
Ubuntusnapd18.042.45.1+18.04.2vulnerable
Ubuntusnapd18.042.46.1+18.04vulnerable
Ubuntusnapd18.042.47.1+18.04vulnerable
Ubuntusnapd18.042.48+18.04vulnerable
Ubuntusnapd18.042.48.3+18.04vulnerable
Ubuntusnapd18.042.49.2+18.04vulnerable
Ubuntusnapd18.042.51.1+18.04vulnerable
Ubuntusnapd18.042.54.2+18.04ubuntu1vulnerable
Ubuntusnapd18.042.54.3+18.04vulnerable
Ubuntusnapd18.042.54.3+18.04.2ubuntu0.1vulnerable
Ubuntusnapd18.042.54.3+18.04.2ubuntu0.2vulnerable
Ubuntusnapd18.042.55.5+18.04vulnerable
Ubuntusnapd18.042.57.5+18.04vulnerable
Ubuntusnapd18.042.57.5+18.04ubuntu0.1fixed
Ubuntusnapd20.042.41+19.10.1vulnerable
Ubuntusnapd20.042.42.1+20.04vulnerable
Ubuntusnapd20.042.43.3+git1.8109f8vulnerable
Ubuntusnapd20.042.44~pre1+20.04vulnerable
Ubuntusnapd20.042.44+20.04vulnerable
Ubuntusnapd20.042.44.2+20.04vulnerable
Ubuntusnapd20.042.44.3+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04.2vulnerable
Ubuntusnapd20.042.46.1+20.04vulnerable
Ubuntusnapd20.042.47.1+20.04vulnerable
Ubuntusnapd20.042.48+20.04vulnerable
Ubuntusnapd20.042.48.3+20.04vulnerable
Ubuntusnapd20.042.49.2+20.04vulnerable
Ubuntusnapd20.042.51.1+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.2+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.3+20.04vulnerable
Ubuntusnapd20.042.54.3+20.04.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.2vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.3vulnerable
Ubuntusnapd20.042.55.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04ubuntu0.1fixed
Ubuntusnapd22.042.53+21.10ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu2vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu3vulnerable
Ubuntusnapd22.042.54.3+git19.g868fc21+22.04vulnerable
Ubuntusnapd22.042.54.3+git26.g360067e+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04.1vulnerable
Ubuntusnapd22.042.55.3+22.04vulnerable
Ubuntusnapd22.042.55.3+22.04ubuntu1vulnerable
Ubuntusnapd22.042.55.5+22.04vulnerable
Ubuntusnapd22.042.56.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.57.4+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04ubuntu0.1fixed
Ubuntusnapdpro1.9vulnerable
Ubuntusnapdpro1.9.1.1vulnerable
Ubuntusnapdpro1.9.2vulnerable
Ubuntusnapdpro2.0vulnerable
Ubuntusnapdpro2.0.1vulnerable
Ubuntusnapdpro2.0.2vulnerable
Ubuntusnapdpro2.0.3vulnerable
Ubuntusnapdpro2.0.5vulnerable
Ubuntusnapdpro2.0.8vulnerable
Ubuntusnapdpro2.0.9vulnerable
Ubuntusnapdpro2.0.10vulnerable
Ubuntusnapdpro2.11+0.16.04vulnerable
Ubuntusnapdpro2.12+0.16.04vulnerable
Ubuntusnapdpro2.13vulnerable
Ubuntusnapdpro2.14.2~16.04vulnerable
Ubuntusnapdpro2.15.2ubuntu1vulnerable
Ubuntusnapdpro2.16ubuntu3vulnerable
Ubuntusnapdpro2.17.1ubuntu1vulnerable
Ubuntusnapdpro2.20.1ubuntu1vulnerable
Ubuntusnapdpro2.21vulnerable
Ubuntusnapdpro2.22.2vulnerable
Ubuntusnapdpro2.22.3vulnerable
Ubuntusnapdpro2.22.6vulnerable
Ubuntusnapdpro2.23.1vulnerable
Ubuntusnapdpro2.24.1vulnerable
Ubuntusnapdpro2.25vulnerable
Ubuntusnapdpro2.26.10vulnerable
Ubuntusnapdpro2.27.5vulnerable
Ubuntusnapdpro2.28.5vulnerable
Ubuntusnapdpro2.29.4.2vulnerable
Ubuntusnapdpro2.32.3.2vulnerable
Ubuntusnapdpro2.32.9vulnerable
Ubuntusnapdpro2.33.1ubuntu2vulnerable
Ubuntusnapdpro2.34.2vulnerable
Ubuntusnapdpro2.34.2ubuntu0.1vulnerable
Ubuntusnapdpro2.37.4vulnerable
Ubuntusnapdpro2.37.4ubuntu0.1vulnerable
Ubuntusnapdpro2.38vulnerable
Ubuntusnapdpro2.39.2vulnerable
Ubuntusnapdpro2.39.2ubuntu0.2vulnerable
Ubuntusnapdpro2.40vulnerable
Ubuntusnapdpro2.42.1vulnerable
Ubuntusnapdpro2.45.1vulnerable
Ubuntusnapdpro2.45.1ubuntu0.2vulnerable
Ubuntusnapdpro2.46.1vulnerable
Ubuntusnapdpro2.47.1vulnerable
Ubuntusnapdpro2.48vulnerable
Ubuntusnapdpro2.48.3vulnerable
Ubuntusnapdpro2.54.3+16.04~esm2vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm3vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm4vulnerable
Ubuntusnapdpro2.54.3+16.04.0ubuntu0.1~esm5fixed
Ubuntusnapd18.042.28.5+17.10vulnerable
Ubuntusnapd18.042.29.4.1+18.04vulnerable
Ubuntusnapd18.042.29.4.2+18.04vulnerable
Ubuntusnapd18.042.31.1+18.04vulnerable
Ubuntusnapd18.042.32+18.04~pre5vulnerable
Ubuntusnapd18.042.32+18.04~pre6vulnerable
Ubuntusnapd18.042.32+18.04vulnerable
Ubuntusnapd18.042.32.3.2+18.04vulnerable
Ubuntusnapd18.042.32.5+18.04vulnerable
Ubuntusnapd18.042.32.8+18.04vulnerable
Ubuntusnapd18.042.32.9+18.04vulnerable
Ubuntusnapd18.042.33.1+18.04ubuntu2vulnerable
Ubuntusnapd18.042.34.2+18.04vulnerable
Ubuntusnapd18.042.34.2+18.04.1vulnerable
Ubuntusnapd18.042.37.1+18.04vulnerable
Ubuntusnapd18.042.37.1.1+18.04vulnerable
Ubuntusnapd18.042.37.4+18.04vulnerable
Ubuntusnapd18.042.37.4+18.04.1vulnerable
Ubuntusnapd18.042.38+18.04vulnerable
Ubuntusnapd18.042.39.2+18.04vulnerable
Ubuntusnapd18.042.40+18.04vulnerable
Ubuntusnapd18.042.42.1+18.04vulnerable
Ubuntusnapd18.042.45.1+18.04vulnerable
Ubuntusnapd18.042.45.1+18.04.2vulnerable
Ubuntusnapd18.042.46.1+18.04vulnerable
Ubuntusnapd18.042.47.1+18.04vulnerable
Ubuntusnapd18.042.48+18.04vulnerable
Ubuntusnapd18.042.48.3+18.04vulnerable
Ubuntusnapd18.042.49.2+18.04vulnerable
Ubuntusnapd18.042.51.1+18.04vulnerable
Ubuntusnapd18.042.54.2+18.04ubuntu1vulnerable
Ubuntusnapd18.042.54.3+18.04vulnerable
Ubuntusnapd18.042.54.3+18.04.2ubuntu0.1vulnerable
Ubuntusnapd18.042.54.3+18.04.2ubuntu0.2vulnerable
Ubuntusnapd18.042.55.5+18.04vulnerable
Ubuntusnapd18.042.57.5+18.04vulnerable
Ubuntusnapd18.042.57.5+18.04ubuntu0.1fixed
Ubuntusnapd20.042.41+19.10.1vulnerable
Ubuntusnapd20.042.42.1+20.04vulnerable
Ubuntusnapd20.042.43.3+git1.8109f8vulnerable
Ubuntusnapd20.042.44~pre1+20.04vulnerable
Ubuntusnapd20.042.44+20.04vulnerable
Ubuntusnapd20.042.44.2+20.04vulnerable
Ubuntusnapd20.042.44.3+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04.2vulnerable
Ubuntusnapd20.042.46.1+20.04vulnerable
Ubuntusnapd20.042.47.1+20.04vulnerable
Ubuntusnapd20.042.48+20.04vulnerable
Ubuntusnapd20.042.48.3+20.04vulnerable
Ubuntusnapd20.042.49.2+20.04vulnerable
Ubuntusnapd20.042.51.1+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.2+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.3+20.04vulnerable
Ubuntusnapd20.042.54.3+20.04.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.2vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.3vulnerable
Ubuntusnapd20.042.55.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04ubuntu0.1fixed
Ubuntusnapd22.042.53+21.10ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu2vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu3vulnerable
Ubuntusnapd22.042.54.3+git19.g868fc21+22.04vulnerable
Ubuntusnapd22.042.54.3+git26.g360067e+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04.1vulnerable
Ubuntusnapd22.042.55.3+22.04vulnerable
Ubuntusnapd22.042.55.3+22.04ubuntu1vulnerable
Ubuntusnapd22.042.55.5+22.04vulnerable
Ubuntusnapd22.042.56.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.57.4+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansnapdsourcesid2.57.6-1not yet assignedNot reportedNot reported
Debiansnapdsourceforky2.57.6-1not yet assignedNot reportedNot reported
Debiansnapdsourcetrixie2.57.6-1not yet assignedNot reportedNot reported
Debiansnapdsourcebookworm2.57.6-1not yet assignedNot reportedNot reported
Ubuntusnapddebpro2.54.3+16.04.0ubuntu0.1~esm5Not reportedUSN-5753-1Not reported
Ubuntusnapddeb18.042.57.5+18.04ubuntu0.1Not reportedUSN-5753-1Not reported
Ubuntusnapddeb20.042.57.5+20.04ubuntu0.1Not reportedUSN-5753-1Not reported
Ubuntusnapddeb22.042.57.5+22.04ubuntu0.1Not reportedUSN-5753-1Not reported
Ubuntusnapddebpro2.54.3+16.04.0ubuntu0.1~esm5Not reportedUBUNTU-CVE-2022-3328Not reported
Ubuntusnapddeb18.042.57.5+18.04ubuntu0.1Not reportedUBUNTU-CVE-2022-3328Not reported
Ubuntusnapddeb20.042.57.5+20.04ubuntu0.1Not reportedUBUNTU-CVE-2022-3328Not reported
Ubuntusnapddeb22.042.57.5+22.04ubuntu0.1Not reportedUBUNTU-CVE-2022-3328Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

  • [snapd]Unknown
    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

  • Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.57.6-1

      dsa · snapd · debian · bookworm

Observed:

References