CVE catalog

CVE-2024-29069

snapd vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 25, 2026

In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-system image and so can contain symbolic links and other file types. Various file entries within the snap squashfs image (such as icons and desktop files etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained symbolic links at these paths could then cause snapd to write out the contents of the symbolic link destination into a world-readable directory. This in-turn could allow an unprivileged user to gain access to privileged information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansnapdsid2.77.1-2fixed
Debiansnapdforky2.77.1-2fixed
Debiansnapdtrixie2.68.3-3+deb13u1fixed
Debiansnapdtrixie-security2.68.3-3+deb13u1fixed
Debiansnapdbookworm2.57.6-1+deb12u1vulnerable
Debiansnapdbookworm-security2.57.6-1+deb12u1vulnerable
UbuntusnapdnobleNot reportedvulnerable
Ubuntusnapdnoble2.63+24.04ubuntu0.1fixed
Ubuntugolang-github-snapcore-snapd-devnoble2.63+24.04ubuntu0.1fixed
Ubuntugolang-github-ubuntu-core-snappy-devnoble2.63+24.04ubuntu0.1fixed
Ubuntusnap-confinenoble2.63+24.04ubuntu0.1fixed
Ubuntusnapd-xdg-opennoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-core-launchernoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-core-snapd-unitsnoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-snappynoble2.63+24.04ubuntu0.1fixed
Ubuntuubuntu-snappy-clinoble2.63+24.04ubuntu0.1fixed
Ubuntusnapdpro2.28.5+17.10vulnerable
Ubuntusnapdpro2.29.4.1+18.04vulnerable
Ubuntusnapdpro2.29.4.2+18.04vulnerable
Ubuntusnapdpro2.31.1+18.04vulnerable
Ubuntusnapdpro2.32+18.04~pre5vulnerable
Ubuntusnapdpro2.32+18.04~pre6vulnerable
Ubuntusnapdpro2.32+18.04vulnerable
Ubuntusnapdpro2.32.3.2+18.04vulnerable
Ubuntusnapdpro2.32.5+18.04vulnerable
Ubuntusnapdpro2.32.8+18.04vulnerable
Ubuntusnapdpro2.32.9+18.04vulnerable
Ubuntusnapdpro2.33.1+18.04ubuntu2vulnerable
Ubuntusnapdpro2.34.2+18.04vulnerable
Ubuntusnapdpro2.34.2+18.04.1vulnerable
Ubuntusnapdpro2.37.1+18.04vulnerable
Ubuntusnapdpro2.37.1.1+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04vulnerable
Ubuntusnapdpro2.37.4+18.04.1vulnerable
Ubuntusnapdpro2.38+18.04vulnerable
Ubuntusnapdpro2.39.2+18.04vulnerable
Ubuntusnapdpro2.40+18.04vulnerable
Ubuntusnapdpro2.42.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04vulnerable
Ubuntusnapdpro2.45.1+18.04.2vulnerable
Ubuntusnapdpro2.46.1+18.04vulnerable
Ubuntusnapdpro2.47.1+18.04vulnerable
Ubuntusnapdpro2.48+18.04vulnerable
Ubuntusnapdpro2.48.3+18.04vulnerable
Ubuntusnapdpro2.49.2+18.04vulnerable
Ubuntusnapdpro2.51.1+18.04vulnerable
Ubuntusnapdpro2.54.2+18.04ubuntu1vulnerable
Ubuntusnapdpro2.54.3+18.04vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.1vulnerable
Ubuntusnapdpro2.54.3+18.04.2ubuntu0.2vulnerable
Ubuntusnapdpro2.55.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04vulnerable
Ubuntusnapdpro2.57.5+18.04ubuntu0.1vulnerable
Ubuntusnapdpro2.58+18.04vulnerable
Ubuntusnapdpro2.58+18.04.1vulnerable
Ubuntusnapdpro2.61.4ubuntu0.18.04.1+esm1fixed
Ubuntusnapd20.042.41+19.10.1vulnerable
Ubuntusnapd20.042.42.1+20.04vulnerable
Ubuntusnapd20.042.43.3+git1.8109f8vulnerable
Ubuntusnapd20.042.44~pre1+20.04vulnerable
Ubuntusnapd20.042.44+20.04vulnerable
Ubuntusnapd20.042.44.2+20.04vulnerable
Ubuntusnapd20.042.44.3+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04vulnerable
Ubuntusnapd20.042.45.1+20.04.2vulnerable
Ubuntusnapd20.042.46.1+20.04vulnerable
Ubuntusnapd20.042.47.1+20.04vulnerable
Ubuntusnapd20.042.48+20.04vulnerable
Ubuntusnapd20.042.48.3+20.04vulnerable
Ubuntusnapd20.042.49.2+20.04vulnerable
Ubuntusnapd20.042.51.1+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.2+20.04ubuntu2vulnerable
Ubuntusnapd20.042.54.3+20.04vulnerable
Ubuntusnapd20.042.54.3+20.04.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.1vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.2vulnerable
Ubuntusnapd20.042.54.3+20.04.1ubuntu0.3vulnerable
Ubuntusnapd20.042.55.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04vulnerable
Ubuntusnapd20.042.57.5+20.04ubuntu0.1vulnerable
Ubuntusnapd20.042.58+20.04vulnerable
Ubuntusnapd20.042.58+20.04.1vulnerable
Ubuntusnapd20.042.61.3+20.04vulnerable
Ubuntusnapd20.042.62+20.04vulnerable
Ubuntusnapd20.042.63+20.04vulnerable
Ubuntusnapd20.042.63+20.04ubuntu0.1fixed
Ubuntusnapd22.042.53+21.10ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu2vulnerable
Ubuntusnapd22.042.54.2+22.04ubuntu3vulnerable
Ubuntusnapd22.042.54.3+git19.g868fc21+22.04vulnerable
Ubuntusnapd22.042.54.3+git26.g360067e+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04vulnerable
Ubuntusnapd22.042.55.2+22.04.1vulnerable
Ubuntusnapd22.042.55.3+22.04vulnerable
Ubuntusnapd22.042.55.3+22.04ubuntu1vulnerable
Ubuntusnapd22.042.55.5+22.04vulnerable
Ubuntusnapd22.042.56.2+22.04ubuntu1vulnerable
Ubuntusnapd22.042.57.4+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04vulnerable
Ubuntusnapd22.042.57.5+22.04ubuntu0.1vulnerable
Ubuntusnapd22.042.58+22.04vulnerable
Ubuntusnapd22.042.58+22.04.1vulnerable
Ubuntusnapd22.042.61.3+22.04vulnerable
Ubuntusnapd22.042.62+22.04vulnerable
Ubuntusnapd22.042.63+22.04vulnerable
Ubuntusnapd22.042.63+22.04ubuntu0.1fixed
Ubuntusnapd24.042.60.4+23.10vulnerable
Ubuntusnapd24.042.61.3+24.04vulnerable
Ubuntusnapd24.042.62+24.04build1vulnerable
Ubuntusnapd24.042.63+24.04vulnerable
Ubuntusnapd24.042.63+24.04ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansnapdsourcesid2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourceforky2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourcetrixie2.62-1not yet assignedNot reportedNot reported
Debiansnapdsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntusnapddebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntugolang-github-snapcore-snapd-devdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntugolang-github-ubuntu-core-snappy-devdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnap-confinedebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnapd-xdg-opendebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-core-launcherdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-core-snapd-unitsdebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-snappydebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntuubuntu-snappy-clidebnoble2.63+24.04ubuntu0.1Not reportedNot reportedNot reported
Ubuntusnapddebpro2.61.4ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2024-29069Not reported
Ubuntusnapddeb20.042.63+20.04ubuntu0.1Not reportedUBUNTU-CVE-2024-29069Not reported
Ubuntusnapddeb22.042.63+22.04ubuntu0.1Not reportedUBUNTU-CVE-2024-29069Not reported
Ubuntusnapddeb24.042.63+24.04ubuntu0.1Not reportedUBUNTU-CVE-2024-29069Not reported

Notes

[bookworm] snapd: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]