Executive brief
snapd failed to properly check the destination of symbolic links when extracting a snap in github.com/snapcore/snapd
Affected products
- Go github.com/snapcore/snapd
Junglewise Threat Intelligence
CVE-2024-29069: GO-2024-3009 - snapd failed to properly check the destination of symbolic links when extracting a snap in github.com/snapcore/snapd
CVE-2024-29069 · Severity: low · CVSS 3.1 · Published 2024-08-06
Technologies: github.com/snapcore/snapd (Go). Vendors: Go.
Related threats
- GO-2024-3008 - snapd failed to properly check the file type when extracting a snap in github.com/snapcore/snapd
- GO-2024-3007 - snapd failed to restrict writes to the $HOME/bin path in github.com/snapcore/snapd
- GO-2024-2906 - in github.com/snapcore/snapd
- GO-2024-2468 - snapd Race Condition vulnerability in github.com/snapcore/snapd
- Duplicate Advisory: : snapd snapctl auth bypass