| CVE-2024-29069 |
In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap
|
4.8
Medium
|
Jul 25, 2024 |
| CVE-2024-29068 |
In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap
|
5.8
Medium
|
Jul 25, 2024 |
| CVE-2024-1724 |
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…
|
6.3
Medium
|
Jul 25, 2024 |
| CVE-2020-27352 |
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify…
|
9.3
Critical
|
Jun 21, 2024 |
| CVE-2024-5138 |
The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged…
|
8.1
High
|
May 31, 2024 |
| CVE-2020-11934 |
It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the…
|
5.9
Medium
|
Jul 29, 2020 |
| CVE-2020-11933 |
cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every…
|
7.3
High
|
Jul 29, 2020 |
| CVE-2019-7304 |
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run…
|
8.8
High
|
Apr 23, 2019 |
| CVE-2019-7303 |
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert…
|
5.7
Medium
|
Apr 23, 2019 |