8.8
High
CVE-2019-7304 Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run…
Description
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| snapd 2.37 | earliest → < 2.37.1 | 2.37.1 |
References
- usn.ubuntu.com usn.ubuntu.com
- www.exploit-db.com www.exploit-db.com
- www.exploit-db.com www.exploit-db.com
Timeline
- Published
- Last modified
Other CVEs of snapd
The 9 CVEs of snapd →
CVE-2024-29069
In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap
4.8
Medium
CVE-2024-29068
In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap
5.8
Medium
CVE-2024-1724
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…
6.3
Medium
CVE-2020-27352
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify…
9.3
Critical