CVE-2024-5138

Go/github.com/snapcore/snapd CVE-2024-5138: medium 4

CVE-2024-5138: snapd snapctl auth bypass

Action: Upgrade github.com/snapcore/snapd to 0.0.0-20240524114846-68ee9c6aa916 or later.

go get github.com/snapcore/snapd@v2.63.1

go get github.com/snapcore/snapd@v0.0.0-20240524114846-68ee9c6aa916

Affected

Fixed versions

Sources

• osv: GHSA-p9v8-q5m4-pf46
• https://github.com/canonical/snapd/security/advisories/GHSA-p9v8-q5m4-pf46
• https://github.com/canonical/snapd/commit/68ee9c6aa916ab87dbfd9a26030690f2cabf1e14
• https://bugs.launchpad.net/snapd/+bug/2065077
• https://github.com/canonical/snapd
• https://ubuntu.com/security/CVE-2024-5138
• https://www.cve.org/CVERecord?id=CVE-2024-5138

CVE-2024-5138 · published 2025-01-16T17:19:07Z · modified 2026-07-08T07:14:03.911841367Z · JSON

Go/github.com/snapcore/snapd CVE-2024-5138: high 8.1

CVE-2024-5138 in github.com/snapcore/snapd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2906
• nvd: CVE-2024-5138
• https://www.cve.org/CVERecord?id=CVE-2024-5138
• https://github.com/snapcore/snapd/commit/68ee9c6aa916ab87dbfd9a26030690f2cabf1e14
• https://bugs.launchpad.net/snapd/+bug/2065077

CVE-2024-5138 · published 2024-06-14T13:41:08Z · modified 2026-03-03T04:51:52.766662Z · JSON