{"id":"CVE-2022-3328","aliases":["DEBIAN-CVE-2022-3328","DLA-3215-1","DSA-5292-1","EUVD-2024-0335","GHSA-cjqf-877p-7m3f","GO-2024-2468","UBUNTU-CVE-2022-3328","USN-5753-1"],"status":"published","title":"snapd Race Condition vulnerability","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00384,"percentile":0.32699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-362"],"published":"2022-11-30T00:00:00Z","modified":"2026-10-28T02:30:50Z","exploits":[{"source":"pocgithub","id":"Mr-xn/CVE-2022-3328","title":"Mr-xn/CVE-2022-3328","date":"2022-12-01","url":"https://github.com/Mr-xn/CVE-2022-3328"}],"fixes":[{"ecosystem":"Go","package":"github.com/snapcore/snapd","fixed_in":["2.57.6"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"snapd","fixed_in":["2.57.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"snapd","fixed_in":["2.57.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"snapd","fixed_in":["2.57.6-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"snapd","fixed_in":["2.37.4-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"snapd","fixed_in":["2.49-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"snapd","fixed_in":["2.54.3+16.04.0ubuntu0.1~esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"snapd","fixed_in":["2.57.5+18.04ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"snapd","fixed_in":["2.57.5+20.04ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"snapd","fixed_in":["2.57.5+22.04ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/snapcore/snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.6-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.4-1+deb10u2"}]}],"versions":["2.37.4-1","2.37.4-1+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49-1+deb11u2"}]}],"versions":["2.49-1","2.49-1+deb11u1"]},{"source":"osv","ecosystem":"Go","package":"github.com/snapcore/snapd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.57.6"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/snapcore/snapd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.3+16.04.0ubuntu0.1~esm5"}]}],"versions":["1.9","1.9.1.1","1.9.2","2.0","2.0.1","2.0.2","2.0.3","2.0.5","2.0.8","2.0.9","2.0.10","2.11+0.16.04","2.12+0.16.04","2.13","2.14.2~16.04","2.15.2ubuntu1","2.16ubuntu3","2.17.1ubuntu1","2.20.1ubuntu1","2.21","2.22.2","2.22.3","2.22.6","2.23.1","2.24.1","2.25","2.26.10","2.27.5","2.28.5","2.29.4.2","2.32.3.2","2.32.9","2.33.1ubuntu2","2.34.2","2.34.2ubuntu0.1","2.37.4","2.37.4ubuntu0.1","2.38","2.39.2","2.39.2ubuntu0.2","2.40","2.42.1","2.45.1","2.45.1ubuntu0.2","2.46.1","2.47.1","2.48","2.48.3","2.54.3+16.04~esm2","2.54.3+16.04.0ubuntu0.1~esm3","2.54.3+16.04.0ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+18.04ubuntu0.1"}]}],"versions":["2.28.5+17.10","2.29.4.1+18.04","2.29.4.2+18.04","2.31.1+18.04","2.32+18.04~pre5","2.32+18.04~pre6","2.32+18.04","2.32.3.2+18.04","2.32.5+18.04","2.32.8+18.04","2.32.9+18.04","2.33.1+18.04ubuntu2","2.34.2+18.04","2.34.2+18.04.1","2.37.1+18.04","2.37.1.1+18.04","2.37.4+18.04","2.37.4+18.04.1","2.38+18.04","2.39.2+18.04","2.40+18.04","2.42.1+18.04","2.45.1+18.04","2.45.1+18.04.2","2.46.1+18.04","2.47.1+18.04","2.48+18.04","2.48.3+18.04","2.49.2+18.04","2.51.1+18.04","2.54.2+18.04ubuntu1","2.54.3+18.04","2.54.3+18.04.2ubuntu0.1","2.54.3+18.04.2ubuntu0.2","2.55.5+18.04","2.57.5+18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+20.04ubuntu0.1"}]}],"versions":["2.41+19.10.1","2.42.1+20.04","2.43.3+git1.8109f8","2.44~pre1+20.04","2.44+20.04","2.44.2+20.04","2.44.3+20.04","2.45.1+20.04","2.45.1+20.04.2","2.46.1+20.04","2.47.1+20.04","2.48+20.04","2.48.3+20.04","2.49.2+20.04","2.51.1+20.04ubuntu2","2.54.2+20.04ubuntu2","2.54.3+20.04","2.54.3+20.04.1","2.54.3+20.04.1ubuntu0.1","2.54.3+20.04.1ubuntu0.2","2.54.3+20.04.1ubuntu0.3","2.55.5+20.04","2.57.5+20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+22.04ubuntu0.1"}]}],"versions":["2.53+21.10ubuntu1","2.54.2+22.04ubuntu1","2.54.2+22.04ubuntu2","2.54.2+22.04ubuntu3","2.54.3+git19.g868fc21+22.04","2.54.3+git26.g360067e+22.04","2.55.2+22.04","2.55.2+22.04.1","2.55.3+22.04","2.55.3+22.04ubuntu1","2.55.5+22.04","2.56.2+22.04ubuntu1","2.57.4+22.04","2.57.5+22.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.54.3+16.04.0ubuntu0.1~esm5"}]}],"versions":["1.9","1.9.1.1","1.9.2","2.0","2.0.1","2.0.2","2.0.3","2.0.5","2.0.8","2.0.9","2.0.10","2.11+0.16.04","2.12+0.16.04","2.13","2.14.2~16.04","2.15.2ubuntu1","2.16ubuntu3","2.17.1ubuntu1","2.20.1ubuntu1","2.21","2.22.2","2.22.3","2.22.6","2.23.1","2.24.1","2.25","2.26.10","2.27.5","2.28.5","2.29.4.2","2.32.3.2","2.32.9","2.33.1ubuntu2","2.34.2","2.34.2ubuntu0.1","2.37.4","2.37.4ubuntu0.1","2.38","2.39.2","2.39.2ubuntu0.2","2.40","2.42.1","2.45.1","2.45.1ubuntu0.2","2.46.1","2.47.1","2.48","2.48.3","2.54.3+16.04~esm2","2.54.3+16.04.0ubuntu0.1~esm3","2.54.3+16.04.0ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+18.04ubuntu0.1"}]}],"versions":["2.28.5+17.10","2.29.4.1+18.04","2.29.4.2+18.04","2.31.1+18.04","2.32+18.04~pre5","2.32+18.04~pre6","2.32+18.04","2.32.3.2+18.04","2.32.5+18.04","2.32.8+18.04","2.32.9+18.04","2.33.1+18.04ubuntu2","2.34.2+18.04","2.34.2+18.04.1","2.37.1+18.04","2.37.1.1+18.04","2.37.4+18.04","2.37.4+18.04.1","2.38+18.04","2.39.2+18.04","2.40+18.04","2.42.1+18.04","2.45.1+18.04","2.45.1+18.04.2","2.46.1+18.04","2.47.1+18.04","2.48+18.04","2.48.3+18.04","2.49.2+18.04","2.51.1+18.04","2.54.2+18.04ubuntu1","2.54.3+18.04","2.54.3+18.04.2ubuntu0.1","2.54.3+18.04.2ubuntu0.2","2.55.5+18.04","2.57.5+18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+20.04ubuntu0.1"}]}],"versions":["2.41+19.10.1","2.42.1+20.04","2.43.3+git1.8109f8","2.44~pre1+20.04","2.44+20.04","2.44.2+20.04","2.44.3+20.04","2.45.1+20.04","2.45.1+20.04.2","2.46.1+20.04","2.47.1+20.04","2.48+20.04","2.48.3+20.04","2.49.2+20.04","2.51.1+20.04ubuntu2","2.54.2+20.04ubuntu2","2.54.3+20.04","2.54.3+20.04.1","2.54.3+20.04.1ubuntu0.1","2.54.3+20.04.1ubuntu0.2","2.54.3+20.04.1ubuntu0.3","2.55.5+20.04","2.57.5+20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"snapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.57.5+22.04ubuntu0.1"}]}],"versions":["2.53+21.10ubuntu1","2.54.2+22.04ubuntu1","2.54.2+22.04ubuntu2","2.54.2+22.04ubuntu3","2.54.3+git19.g868fc21+22.04","2.54.3+git26.g360067e+22.04","2.55.2+22.04","2.55.2+22.04.1","2.55.3+22.04","2.55.3+22.04ubuntu1","2.55.5+22.04","2.56.2+22.04ubuntu1","2.57.4+22.04","2.57.5+22.04"]}],"products":[{"vendor":"canonical","product":"snapd"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"canonical ltd.","product":"snapd"}],"references":[{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328","tags":["issue-tracking","x_transferred","Third Party Advisory","report","web","advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5753-1","tags":["third-party-advisory","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3328","tags":["advisory"]},{"url":"https://github.com/snapcore/snapd/pull/12380","tags":["web","fix"]},{"url":"https://github.com/snapcore/snapd/commit/21ebc51f00b8a1417888faa2e83a372fd29d0f5e","tags":["web","fix"]},{"url":"https://github.com/snapcore/snapd/commit/6226cdc57052f4b7057d92f2e549aa169e35cd2d","tags":["web","fix"]},{"url":"https://github.com/advisories/GHSA-cjqf-877p-7m3f","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3328.json","tags":["advisory"]},{"url":"https://github.com/snapcore/snapd","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3328","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3328","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-3328","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2024-01-08T18:04:10.534Z","modified":"2025-06-03T14:35:04.952Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2024-0335","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2024-01-08T18:04:10Z","modified":"2025-06-03T14:35:04Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:31.558173Z"}],"ghsa":[{"id":"GHSA-cjqf-877p-7m3f","title":"snapd Race Condition vulnerability","description":"Race condition in snap-confine's `must_mkdir_and_open_with_perms()`","status":"published","published":"2024-01-08T18:30:29Z","modified":"2024-11-18T16:26:36Z","cvss":[{"version":"4.0","score":9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:38:20.012356Z"}],"nvd":[{"id":"CVE-2022-3328","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2024-01-08T18:15:45.233Z","modified":"2026-06-17T04:59:18.94Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"CVE-2022-3328","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2024-01-08T18:04:10.534Z","modified":"2026-10-28T02:30:50.155262615Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-3328","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2024-01-08T18:15:45.233Z","modified":"2026-11-03T08:01:24.081143476Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-cjqf-877p-7m3f","title":"snapd Race Condition vulnerability","description":"Race condition in snap-confine's `must_mkdir_and_open_with_perms()`","status":"published","published":"2024-01-08T18:30:29Z","modified":"2024-11-18T16:26:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":9,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","level":"critical"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T15:46:45.28161Z"},{"id":"UBUNTU-CVE-2022-3328","description":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","status":"published","published":"2022-11-30T00:00:00Z","modified":"2026-02-04T04:31:27.340821Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"DLA-3215-1","title":"snapd - security update","status":"published","published":"2022-12-02T00:00:00Z","modified":"2026-03-09T01:21:45.318828Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5292-1","title":"snapd - security update","status":"published","published":"2022-12-01T00:00:00Z","modified":"2026-03-09T02:11:02.468538Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"GO-2024-2468","title":"snapd Race Condition vulnerability in github.com/snapcore/snapd","description":"snapd Race Condition vulnerability in github.com/snapcore/snapd.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: github.com/snapcore/snapd before v2.57.6.","status":"published","published":"2024-06-05T15:10:52Z","modified":"2024-07-09T19:33:56Z","updated_at":"2026-11-02T15:47:01.185262Z"},{"id":"USN-5753-1","title":"snapd vulnerability","description":"The Qualys Research Team discovered that a race condition existed in the\nsnapd snap-confine binary when preparing the private /tmp mount for a\nsnap. A local attacker could possibly use this issue to escalate privileges\nand execute arbitrary code.\n","status":"published","published":"2022-12-01T01:08:10Z","modified":"2026-06-25T13:31:36.602958752Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}