VULNERABILITY INTELLIGENCE

CVE-2019-7303

CVSS score7.5 HIGH

EPSS probability3.70%

CISA KEVNot currently listed

Published2019-04-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.

Weakness classification

security@ubuntu.com: CWE-628
nvd@nist.gov: NVD-CWE-Other

Primary references

security@ubuntu.com — Third Party Advisory
security@ubuntu.com — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry