Catalogo CVE

CVE-2024-5138

snapd affected and fixed versions

The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap. It was found that snapctl did not properly parse command-line arguments, allowing an unprivileged user to trigger an authorised action on behalf of the snap that would normally require administrator privileges to perform. This could possibly allow an unprivileged user to perform a denial of service or similar.

Gravità: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: May 24, 2024, 11:48:46 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.83% · Oct 27, 2026

Projects and upstream resources

[snapd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2024-5138]
Debiantrixie	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debiantrixie	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2024-5138]
Debiansid	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debiansid	snapd	`2.77.1-2`	Fixed	[CVE-2024-5138]
Debianforky	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debianforky	snapd	`2.77.1-2`	Fixed	[CVE-2024-5138]

Showing 7 fix observations. All 103 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	snapd	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	snapd	Not reported	AffectedDistribution reports no fix	[CVE-2024-5138]
Debianbookworm	snapd	`2.57.6-1+deb12u1`	Affected	[CVE-2024-5138]
Debianbookworm-security	snapd	`2.57.6-1+deb12u1`	Affected	[CVE-2024-5138]
Debianforky	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debianforky	snapd	`2.77.1-2`	Fixed	[CVE-2024-5138]
Debiansid	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debiansid	snapd	`2.77.1-2`	Fixed	[CVE-2024-5138]
Debiantrixie	snapd	`2.62-3`	FixedDistribution-reported fixed boundary	[CVE-2024-5138]
Debiantrixie	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2024-5138]
Debiantrixie-security	snapd	`2.68.3-3+deb13u1`	Fixed	[CVE-2024-5138]
Ubuntu22.04	snapd	`2.53+21.10ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.54.2+22.04ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.54.2+22.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.54.2+22.04ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.54.3+git19.g868fc21+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.54.3+git26.g360067e+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.55.2+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.55.2+22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.55.3+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.55.3+22.04ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.55.5+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.56.2+22.04ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.57.4+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.57.5+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.57.5+22.04ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.58+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.58+22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.61.3+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.62+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.63+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.63+22.04ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.65.3+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.66.1+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.67.1+22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.68.5+ubuntu22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.71+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.72+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.73+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.73+ubuntu22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.74.1+ubuntu22.04.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.75.2+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.76+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.76+ubuntu22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.76.3+ubuntu22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.76.3+ubuntu22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu22.04	snapd	`2.77.1+ubuntu22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.60.4+23.10`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.61.3+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.62+24.04build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.63+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.63+24.04ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.63.1+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.65.3+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.66.1+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.67.1+24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.68.5+ubuntu24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.71+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.72+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.73+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.73+ubuntu24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.73+ubuntu24.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.74.1+ubuntu24.04.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.75.2+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.76+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.76+ubuntu24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.76.3+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntu24.04	snapd	`2.77.1+ubuntu24.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.41+19.10.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.42.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.43.3+git1.8109f8`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.44+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.44.2+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.44.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.44~pre1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.45.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.45.1+20.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.46.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.47.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.48+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.48.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.49.2+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.51.1+20.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.2+20.04ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.3+20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.3+20.04.1ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.3+20.04.1ubuntu0.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.54.3+20.04.1ubuntu0.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.55.5+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.57.5+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.57.5+20.04ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.58+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.58+20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.61.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.62+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.63+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.63+20.04ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.65.3+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.66.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.67.1+20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.67.1+20.04ubuntu1~esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC
Ubuntupro	snapd	`2.67.1+20.04ubuntu1~esm3`	UnknownSource applicability is not established	[UBUNTU-CVE-2024-5138]Oct 22, 2026, 11:20:13 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "snapd",
      "status": "fixed",
      "release": "sid",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "forky",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "2.57.6-1+deb12u1"
    },
    {
      "name": "snapd",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "2.57.6-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1072365,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.62-3"
    },
    {
      "bug": 1072365,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.62-3"
    },
    {
      "bug": 1072365,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.62-3"
    },
    {
      "bug": 1072365,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "snapd",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.41+19.10.1",
        "2.42.1+20.04",
        "2.43.3+git1.8109f8",
        "2.44~pre1+20.04",
        "2.44+20.04",
        "2.44.2+20.04",
        "2.44.3+20.04",
        "2.45.1+20.04",
        "2.45.1+20.04.2",
        "2.46.1+20.04",
        "2.47.1+20.04",
        "2.48+20.04",
        "2.48.3+20.04",
        "2.49.2+20.04",
        "2.51.1+20.04ubuntu2",
        "2.54.2+20.04ubuntu2",
        "2.54.3+20.04",
        "2.54.3+20.04.1",
        "2.54.3+20.04.1ubuntu0.1",
        "2.54.3+20.04.1ubuntu0.2",
        "2.54.3+20.04.1ubuntu0.3",
        "2.55.5+20.04",
        "2.57.5+20.04",
        "2.57.5+20.04ubuntu0.1",
        "2.58+20.04",
        "2.58+20.04.1",
        "2.61.3+20.04",
        "2.62+20.04",
        "2.63+20.04",
        "2.63+20.04ubuntu0.1",
        "2.65.3+20.04",
        "2.66.1+20.04",
        "2.67.1+20.04",
        "2.67.1+20.04ubuntu1~esm1",
        "2.67.1+20.04ubuntu1~esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-5138",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-5138",
      "provider_updated_at": "2026-10-22T23:20:13.534569098Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.53+21.10ubuntu1",
        "2.54.2+22.04ubuntu1",
        "2.54.2+22.04ubuntu2",
        "2.54.2+22.04ubuntu3",
        "2.54.3+git19.g868fc21+22.04",
        "2.54.3+git26.g360067e+22.04",
        "2.55.2+22.04",
        "2.55.2+22.04.1",
        "2.55.3+22.04",
        "2.55.3+22.04ubuntu1",
        "2.55.5+22.04",
        "2.56.2+22.04ubuntu1",
        "2.57.4+22.04",
        "2.57.5+22.04",
        "2.57.5+22.04ubuntu0.1",
        "2.58+22.04",
        "2.58+22.04.1",
        "2.61.3+22.04",
        "2.62+22.04",
        "2.63+22.04",
        "2.63+22.04ubuntu0.1",
        "2.65.3+22.04",
        "2.66.1+22.04",
        "2.67.1+22.04",
        "2.68.5+ubuntu22.04.1",
        "2.71+ubuntu22.04",
        "2.72+ubuntu22.04",
        "2.73+ubuntu22.04",
        "2.73+ubuntu22.04.1",
        "2.74.1+ubuntu22.04.4",
        "2.75.2+ubuntu22.04",
        "2.76+ubuntu22.04",
        "2.76+ubuntu22.04.1",
        "2.76.3+ubuntu22.04",
        "2.76.3+ubuntu22.04.1",
        "2.77.1+ubuntu22.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-5138",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-5138",
      "provider_updated_at": "2026-10-22T23:20:13.534569098Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "2.60.4+23.10",
        "2.61.3+24.04",
        "2.62+24.04build1",
        "2.63+24.04",
        "2.63+24.04ubuntu0.1",
        "2.63.1+24.04",
        "2.65.3+24.04",
        "2.66.1+24.04",
        "2.67.1+24.04",
        "2.68.5+ubuntu24.04.1",
        "2.71+ubuntu24.04",
        "2.72+ubuntu24.04",
        "2.73+ubuntu24.04",
        "2.73+ubuntu24.04.1",
        "2.73+ubuntu24.04.2",
        "2.74.1+ubuntu24.04.4",
        "2.75.2+ubuntu24.04",
        "2.76+ubuntu24.04",
        "2.76+ubuntu24.04.1",
        "2.76.3+ubuntu24.04",
        "2.77.1+ubuntu24.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-5138",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-5138",
      "provider_updated_at": "2026-10-22T23:20:13.534569098Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1072365]

Publisher notes

[bookworm] snapd: Minor issue

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[Debian 12 (Bookworm)]

[golang-github-snapcore-snapd-dev]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.57.6-1+deb12u1 · all · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · all · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[snap-confine]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[snapd]Sconosciuto
Dettagli (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
[ubuntu-core-launcher]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.57.6-1+deb12u1+b2 · amd64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1+b2 · arm64 · bookworm
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · amd64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12
- 2.57.6-1+deb12u1 · arm64 · bookworm-security
  Interessata
  dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

[Debian 13 (Trixie)]

[golang-github-snapcore-snapd-dev]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.68.3-3+deb13u1 · all · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · all · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
[snap-confine]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
[snapd]Sconosciuto
Dettagli (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
[ubuntu-core-launcher]Sconosciuto
Pacchetto sorgente: [snapd]
Dettagli (4)
- 2.68.3-3+deb13u1+b6 · amd64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1+b6 · arm64 · trixie
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · amd64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13
- 2.68.3-3+deb13u1 · arm64 · trixie-security
  Corretta · Corretta: 2.62-3
  dsa · snapd · debian · 13

Osservato: Oct 28, 2026, 4:46:14 PM UTC

Riferimenti

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]