Skip to content
Not rated

CVE-2017-14178 In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and…

Description

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.

Affected products and versions

Product Affected versions Fixed in
snapd Versions not published
Track this CVE