Detections
Analytics

SCA: security update for github.com/snapcore/snapd (GHSA-4mh8-9689-38vr)

high Tenable Cloud Security Plugin ID 410284

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed
 to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to
 the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home'
 plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run
 by the user outside of the expected snap sandbox and hence allow them to escape confinement.
 (CVE-2024-1724)

See Also

https://github.com/advisories/GHSA-4mh8-9689-38vr

Plugin Details

Severity: High

ID: 410284

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 94.39

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-1724

CVSS v3

Risk Factor: High

Base Score: 8.2

Temporal Score: 7.4

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/25/2024

Vulnerability Publication Date: 7/25/2024

Reference Information

CVE: CVE-2024-1724

cwe: CWE-732