CVE-2019-7303
High
Description
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.
SeverityHigh
CVSS7.5
Exploit probability—
ProductCanonical Snapd
PublishedApr 23, 2019
First seenApr 23, 2019
Weakness typeCWE-628CWE-628
How to fix
Update
- canonical snapd2.37.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canonical snapd | v < 2.37.4 | 2.37.4 |
| canonical ubuntu_linux | 14.04, 16.04, 18.04, 18.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.