CVE catalog

CVE-2024-1724

snapd vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 25, 2026

In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home' plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run by the user outside of the expected snap sandbox and hence allow them to escape confinement.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansnapdsid2.77.1-2fixed
Debiansnapdforky2.77.1-2fixed
Debiansnapdtrixie2.68.3-3+deb13u1fixed
Debiansnapdtrixie-security2.68.3-3+deb13u1fixed
Debiansnapdbookworm2.57.6-1+deb12u1vulnerable
Debiansnapdbookworm-security2.57.6-1+deb12u1vulnerable
UbuntusnapdnobleNot reportedvulnerable
Ubuntusnapdnoble2.63+24.04ubuntu0.1fixed
Ubuntugolang-github-snapcore-snapd-devnoble2.63+24.04ubuntu0.1fixed
Ubuntugolang-github-ubuntu-core-snappy-devnoble2.63+24.04ubuntu0.1fixed
Ubuntusnap-confinenoble2.63+24.04ubuntu0.1fixed
Ubuntusnapd-xdg-opennoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-core-launchernoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-core-snapd-unitsnoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-snappynoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-snappy-clinoble2.63+24.04ubuntu0.1fixed
Ubuntusnapdpro2.28.5+17.10vulnerable
Ubuntusnapdpro2.29.4.1+18.04vulnerable
Ubuntusnapdpro2.29.4.2+18.04vulnerable
Ubuntusnapdpro2.31.1+18.04vulnerable
Ubuntusnapdpro2.32+18.04~pre5vulnerable
Ubuntusnapdpro2.32+18.04~pre6vulnerable
Ubuntusnapdpro2.32+18.04vulnerable
Ubuntusnapdpro2.32.3.2+18.04vulnerable
Ubuntusnapdpro2.32.5+18.04vulnerable
Ubuntusnapdpro2.32.8+18.04vulnerable
Ubuntusnapdpro2.32.9+18.04vulnerable
Ubuntusnapdpro2.33.1+18.04ubuntu2vulnerable
Ubuntusnapdpro2.34.2+18.04vulnerable
Ubuntusnapdpro2.34.2+18.04.1vulnerable
Ubuntusnapdpro2.37.1+18.04vulnerable
Ubuntusnapdpro2.37.1.1+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04.1vulnerable
Ubuntusnapdpro2.38+18.04vulnerable
Ubuntusnapdpro2.39.2+18.04vulnerable
Ubuntusnapdpro2.40+18.04vulnerable
Ubuntusnapdpro2.42.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04.2vulnerable
Ubuntusnapdpro2.46.1+18.04vulnerable
Ubuntusnapdpro2.47.1+18.04vulnerable
Ubuntusnapdpro2.48+18.04vulnerable
Ubuntusnapdpro2.48.3+18.04vulnerable
Ubuntusnapdpro2.49.2+18.04vulnerable
Ubuntusnapdpro2.51.1+18.04vulnerable
Ubuntusnapdpro2.54.2+18.04ubuntu1vulnerable
Ubuntusnapdpro2.54.3+18.04vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.1vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.2vulnerable
Ubuntusnapdpro2.55.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04ubuntu0.1vulnerable
Ubuntusnapdpro2.58+18.04vulnerable
Ubuntusnapdpro2.58+18.04.1vulnerable
Ubuntusnapdpro2.61.4ubuntu0.18.04.1+esm1fixed
Ubuntusnapd20.042.41+19.10.1vulnerable
Ubuntusnapd20.042.42.1+20.04vulnerable
Ubuntusnapd20.042.43.3+git1.8109f8vulnerable
Ubuntusnapd20.042.44~pre1+20.04vulnerable
Ubuntusnapd20.042.44+20.04vulnerable
Ubuntusnapd20.042.44.2+20.04vulnerable
Ubuntusnapd20.042.44.3+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04.2vulnerable
Ubuntusnapd20.042.46.1+20.04vulnerable
Ubuntusnapd20.042.47.1+20.04vulnerable
Ubuntusnapd20.042.48+20.04vulnerable
Ubuntusnapd20.042.48.3+20.04vulnerable
Ubuntusnapd20.042.49.2+20.04vulnerable
Ubuntusnapd20.042.51.1+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.2+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.3+20.04vulnerable
Ubuntusnapd20.042.54.3+20.04.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.2vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.3vulnerable
Ubuntusnapd20.042.55.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04ubuntu0.1vulnerable
Ubuntusnapd20.042.58+20.04vulnerable
Ubuntusnapd20.042.58+20.04.1vulnerable
Ubuntusnapd20.042.61.3+20.04vulnerable
Ubuntusnapd20.042.62+20.04vulnerable
Ubuntusnapd20.042.63+20.04vulnerable
Ubuntusnapd20.042.63+20.04ubuntu0.1fixed
Ubuntusnapd22.042.53+21.10ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu2vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu3vulnerable
Ubuntusnapd22.042.54.3+git19.g868fc21+22.04vulnerable
Ubuntusnapd22.042.54.3+git26.g360067e+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04.1vulnerable
Ubuntusnapd22.042.55.3+22.04vulnerable
Ubuntusnapd22.042.55.3+22.04ubuntu1vulnerable
Ubuntusnapd22.042.55.5+22.04vulnerable
Ubuntusnapd22.042.56.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.57.4+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04ubuntu0.1vulnerable
Ubuntusnapd22.042.58+22.04vulnerable
Ubuntusnapd22.042.58+22.04.1vulnerable
Ubuntusnapd22.042.61.3+22.04vulnerable
Ubuntusnapd22.042.62+22.04vulnerable
Ubuntusnapd22.042.63+22.04vulnerable
Ubuntusnapd22.042.63+22.04ubuntu0.1fixed
Ubuntusnapd24.042.60.4+23.10vulnerable
Ubuntusnapd24.042.61.3+24.04vulnerable
Ubuntusnapd24.042.62+24.04build1vulnerable
Ubuntusnapd24.042.63+24.04vulnerable
Ubuntusnapd24.042.63+24.04ubuntu0.1fixed
Ubuntusnapdpro2.28.5+17.10vulnerable
Ubuntusnapdpro2.29.4.1+18.04vulnerable
Ubuntusnapdpro2.29.4.2+18.04vulnerable
Ubuntusnapdpro2.31.1+18.04vulnerable
Ubuntusnapdpro2.32+18.04~pre5vulnerable
Ubuntusnapdpro2.32+18.04~pre6vulnerable
Ubuntusnapdpro2.32+18.04vulnerable
Ubuntusnapdpro2.32.3.2+18.04vulnerable
Ubuntusnapdpro2.32.5+18.04vulnerable
Ubuntusnapdpro2.32.8+18.04vulnerable
Ubuntusnapdpro2.32.9+18.04vulnerable
Ubuntusnapdpro2.33.1+18.04ubuntu2vulnerable
Ubuntusnapdpro2.34.2+18.04vulnerable
Ubuntusnapdpro2.34.2+18.04.1vulnerable
Ubuntusnapdpro2.37.1+18.04vulnerable
Ubuntusnapdpro2.37.1.1+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04.1vulnerable
Ubuntusnapdpro2.38+18.04vulnerable
Ubuntusnapdpro2.39.2+18.04vulnerable
Ubuntusnapdpro2.40+18.04vulnerable
Ubuntusnapdpro2.42.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04.2vulnerable
Ubuntusnapdpro2.46.1+18.04vulnerable
Ubuntusnapdpro2.47.1+18.04vulnerable
Ubuntusnapdpro2.48+18.04vulnerable
Ubuntusnapdpro2.48.3+18.04vulnerable
Ubuntusnapdpro2.49.2+18.04vulnerable
Ubuntusnapdpro2.51.1+18.04vulnerable
Ubuntusnapdpro2.54.2+18.04ubuntu1vulnerable
Ubuntusnapdpro2.54.3+18.04vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.1vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.2vulnerable
Ubuntusnapdpro2.55.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04ubuntu0.1vulnerable
Ubuntusnapdpro2.58+18.04vulnerable
Ubuntusnapdpro2.58+18.04.1vulnerable
Ubuntusnapdpro2.61.4ubuntu0.18.04.1+esm1fixed
Ubuntusnapd20.042.41+19.10.1vulnerable
Ubuntusnapd20.042.42.1+20.04vulnerable
Ubuntusnapd20.042.43.3+git1.8109f8vulnerable
Ubuntusnapd20.042.44~pre1+20.04vulnerable
Ubuntusnapd20.042.44+20.04vulnerable
Ubuntusnapd20.042.44.2+20.04vulnerable
Ubuntusnapd20.042.44.3+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04.2vulnerable
Ubuntusnapd20.042.46.1+20.04vulnerable
Ubuntusnapd20.042.47.1+20.04vulnerable
Ubuntusnapd20.042.48+20.04vulnerable
Ubuntusnapd20.042.48.3+20.04vulnerable
Ubuntusnapd20.042.49.2+20.04vulnerable
Ubuntusnapd20.042.51.1+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.2+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.3+20.04vulnerable
Ubuntusnapd20.042.54.3+20.04.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.2vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.3vulnerable
Ubuntusnapd20.042.55.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04ubuntu0.1vulnerable
Ubuntusnapd20.042.58+20.04vulnerable
Ubuntusnapd20.042.58+20.04.1vulnerable
Ubuntusnapd20.042.61.3+20.04vulnerable
Ubuntusnapd20.042.62+20.04vulnerable
Ubuntusnapd20.042.63+20.04vulnerable
Ubuntusnapd20.042.63+20.04ubuntu0.1fixed
Ubuntusnapd22.042.53+21.10ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu2vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu3vulnerable
Ubuntusnapd22.042.54.3+git19.g868fc21+22.04vulnerable
Ubuntusnapd22.042.54.3+git26.g360067e+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04.1vulnerable
Ubuntusnapd22.042.55.3+22.04vulnerable
Ubuntusnapd22.042.55.3+22.04ubuntu1vulnerable
Ubuntusnapd22.042.55.5+22.04vulnerable
Ubuntusnapd22.042.56.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.57.4+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04ubuntu0.1vulnerable
Ubuntusnapd22.042.58+22.04vulnerable
Ubuntusnapd22.042.58+22.04.1vulnerable
Ubuntusnapd22.042.61.3+22.04vulnerable
Ubuntusnapd22.042.62+22.04vulnerable
Ubuntusnapd22.042.63+22.04vulnerable
Ubuntusnapd22.042.63+22.04ubuntu0.1fixed
Ubuntusnapd24.042.60.4+23.10vulnerable
Ubuntusnapd24.042.61.3+24.04vulnerable
Ubuntusnapd24.042.62+24.04build1vulnerable
Ubuntusnapd24.042.63+24.04vulnerable
Ubuntusnapd24.042.63+24.04ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansnapdsourcesid2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourceforky2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourcetrixie2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntusnapddebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntugolang-github-snapcore-snapd-devdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntugolang-github-ubuntu-core-snappy-devdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnap-confinedebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnapd-xdg-opendebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-core-launcherdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-core-snapd-unitsdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-snappydebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-snappy-clidebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnapddebpro2.61.4ubuntu0.18.04.1+esm1Not reportedUSN-6940-2Not reported
Ubuntusnapddeb20.042.63+20.04ubuntu0.1Not reportedUSN-6940-1Not reported
Ubuntusnapddeb22.042.63+22.04ubuntu0.1Not reportedUSN-6940-1Not reported
Ubuntusnapddeb24.042.63+24.04ubuntu0.1Not reportedUSN-6940-1Not reported
Ubuntusnapddebpro2.61.4ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2024-1724Not reported
Ubuntusnapddeb20.042.63+20.04ubuntu0.1Not reportedUBUNTU-CVE-2024-1724Not reported
Ubuntusnapddeb22.042.63+22.04ubuntu0.1Not reportedUBUNTU-CVE-2024-1724Not reported
Ubuntusnapddeb24.042.63+24.04ubuntu0.1Not reportedUBUNTU-CVE-2024-1724Not reported

Notes

[bookworm] snapd: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1 · all · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

  • [snapd]Unknown
    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

  • Source package: [snapd]

    Details (4)
    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Affected

      usn · snapd · debian · bookworm; usn · snapd · debian · 12

[Debian 13 (Trixie)]

  • Source package: [snapd]

    Details (4)
    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)
    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

  • [snapd]Unknown
    Details (4)
    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

  • Source package: [snapd]

    Details (4)
    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.62-1

      usn · snapd · debian · 13

Observed:

References