Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts
CVE-2021-3626

8.8HIGH

Key Information:

Vendor

Canonical

Status
Multipass
Vendor
CVE Published:
1 July 2021

What is CVE-2021-3626?

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

Affected Version(s)

Multipass < 1.7.0

References

https://github.com/canonical/multipass/pull/2150
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Micah Lee
.