CVE-2021-3626: Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts
Published Oct 1, 2021
·Updated
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.
Affected Software
4 affected components
Canonical Multipass<1.7.0
Microsoft Windows
All of the following
Canonical Multipass<1.7.0
Microsoft Windows
Event History
Oct 1, 2021
CVE Published
via MITRE·02:35 AM
Data Sourced
via MITRE·02:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-3626?
CVE-2021-3626 has a high severity rating due to the potential for privilege escalation.
2
How do I fix CVE-2021-3626?
To fix CVE-2021-3626, update Multipass to version 1.7.0 or later.
3
What systems are affected by CVE-2021-3626?
CVE-2021-3626 affects the Windows version of Multipass prior to 1.7.0.
4
What type of vulnerability is CVE-2021-3626?
CVE-2021-3626 is a privilege escalation vulnerability allowing local process access to TCP control sockets.
5
Can CVE-2021-3626 be exploited remotely?
CVE-2021-3626 cannot be exploited remotely as it requires local access to the control socket.