CVE-2024-29068: 
Linux Debian vulnerability analysis and mitigation

In snapd versions prior to 2.62, a vulnerability was discovered in the file type checking mechanism during snap extraction. The snap format, which uses squashfs file-system images, can contain non-regular files such as pipes or sockets. When snapd extracts these files, particularly icons and other elements, it directly reads them without proper file type validation (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.6 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H. The issue stems from snapd's failure to properly validate file types during the extraction process of snap packages. The vulnerability specifically affects the handling of non-regular files within the snap squashfs image (NVD).

If exploited, this vulnerability could allow an attacker to cause snapd to block indefinitely while attempting to read from non-regular files, resulting in a denial of service condition. The attack requires user interaction, as it can only be triggered if a user is convinced to install a malicious snap containing specially crafted non-regular files at specific paths (Ubuntu Security).

The vulnerability requires local access and user interaction to exploit. An attacker would need to create a malicious snap package containing non-regular files (such as pipes or sockets) and convince a user to install it. The attack has a relatively low complexity but requires user privileges (NVD).

The vulnerability has been fixed in snapd version 2.62. Users are advised to update their systems to the patched version. For Ubuntu users, the fix has been released through standard system updates for Ubuntu 24.04 LTS, 22.04 LTS, and 20.04 LTS (Ubuntu Security).