{"id":"CVE-2022-3328","aliases":["GHSA-cjqf-877p-7m3f","GO-2024-2468"],"url":"https://o3.security/vulnerability/CVE-2022-3328","summary":"snapd Race Condition vulnerability","details":"Race condition in snap-confine's must_mkdir_and_open_with_perms()","published":"2024-01-08T18:04:10.534Z","modified":"2026-10-28T02:30:50.155262615Z","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":2,"affectedPackages":[{"ecosystem":"Go","name":"github.com/snapcore/snapd","fixedVersion":"2.57.6"}],"fix":{"url":"https://github.com/snapcore/snapd/pull/12380","label":"snapcore/snapd#12380"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3328.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3328"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5753-1"},{"type":"REPORT","url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328"},{"type":"PACKAGE","url":"https://github.com/snapcore/snapd"},{"type":"WEB","url":"https://github.com/snapcore/snapd/pull/12380"},{"type":"WEB","url":"https://github.com/snapcore/snapd/commit/21ebc51f00b8a1417888faa2e83a372fd29d0f5e"},{"type":"WEB","url":"https://github.com/snapcore/snapd/commit/6226cdc57052f4b7057d92f2e549aa169e35cd2d"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:30:50.155262615Z"}}