https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:08:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07012 bdu:2024-07012 https://cve.radiocsirt.org/vuln/bdu:2024-07012 https://cve.radiocsirt.org/vuln/euvd-2026-4601 EUVD-2026-4601 https://cve.radiocsirt.org/vuln/euvd-2026-4601 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29068 <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29068 https://cve.radiocsirt.org/vuln/ghsa-64jh-cjwc-w8q6 <p><strong>Affected:</strong> Go: github.com/snapcore/snapd</p> <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> <p><strong>Affected:</strong> Go: github.com/snapcore/snapd</p> <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-64jh-cjwc-w8q6 https://cve.radiocsirt.org/vuln/gsd-2024-29068 gsd-2024-29068 https://cve.radiocsirt.org/vuln/gsd-2024-29068 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29068 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:20.04:LTS: snapd, Ubuntu:22.04:LTS: snapd, Ubuntu:24.04:LTS: snapd</p> <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:20.04:LTS: snapd, Ubuntu:22.04:LTS: snapd, Ubuntu:24.04:LTS: snapd</p> <p>In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can contain files that are non-regular files (such as pipes or sockets etc). Various file entries within the snap squashfs image (such as icons etc) are directly read by snapd when it is extracted. An attacker who could convince a user to install a malicious snap which contained non-regular files at these paths could then cause snapd to block indefinitely trying to read from such files and cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29068 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1712 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Canonical Snap ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Canonical Snap ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen und um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1712