CVE-2021-3155
- Source
- https://cve.org/CVERecord?id=CVE-2021-3155
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3155.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-3155
- Downstream
- Published
- 2022-02-17T23:15:07.337Z
- Modified
- 2026-07-08T05:59:12.421846579Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:canonical:snapd:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "fixed": "2.54.3" } ], "vendor_product": "canonical:snapd", "source": "CPE_RANGE" }, { "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*" ], "vendor_product": "canonical:ubuntu_linux", "extracted_events": [ { "introduced": "18.04" }, { "last_affected": "18.04" }, { "introduced": "20.04" }, { "last_affected": "20.04" }, { "introduced": "21.10" }, { "last_affected": "21.10" } ], "source": "CPE_STRING" } ] }- References
Affected packages
Git / github.com/canonical/snapd
Affected versions
1.*
1.0-0ubuntu1
1.0.1-0ubuntu1
1.1-0ubuntu1
1.1.1-0ubuntu1
1.1.2-0ubuntu1
1.2-0ubuntu1
1.3ubuntu1
1.4ubuntu1
1.5ubuntu1
1.6ubuntu1
1.7.2+20160113ubuntu1
1.7.2+20160204ubuntu1
1.7.2+20160223ubuntu1
1.7.2ubuntu1
1.7.3+20160225ubuntu1
1.7.3+20160303ubuntu1
1.7.3+20160303ubuntu2
1.7.3+20160303ubuntu3
1.7.3+20160303ubuntu4
1.7.3+20160308ubuntu1
1.7.3+20160310ubuntu1
1.7ubuntu1
1.9
1.9.1
1.9.2
1.9.3
1.9.4
2.*
2.0
2.0.10
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.11
2.12
2.13
2.14
2.14.1
2.14.2.16.04
2.15
2.15.2
Other
ppa
untagged-ec50ee5bfb45daefc236