Skip to content

Vulnerabilities of Canonical Ltd. snapd

Is your version affected?

CVE Summary Score Published
CVE-2020-27352 When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify… 9.3 Critical Jun 21, 2024
CVE-2024-5138 The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged… 8.1 High May 31, 2024
CVE-2022-3328 Race condition in snap-confine's must_mkdir_and_open_with_perms() 7.8 High Jan 8, 2024
CVE-2023-1523 Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal… 10.0 Critical Sep 1, 2023
CVE-2021-4120 snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability… 8.2 High Feb 17, 2022
CVE-2021-44730 snapd 2.54.2 did not properly validate the location of the snap-confine binary 7.8 High Feb 17, 2022
CVE-2021-3155 snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions 3.8 Low Feb 17, 2022
CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap 7.8 High Feb 17, 2022

Other Canonical Ltd. products