5.7
Moyenne
CVE-2019-7303 A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert…
Description
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine which ioctl(2) commands to run. This issue affects: Canonical snapd versions prior to 2.37.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| snapd 2.37 | premières → < 2.37.4 | 2.37.4 |
Autres CVE de snapd
Les 9 CVE de snapd →
CVE-2024-29069
In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap
4.8
Moyenne
CVE-2024-29068
In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap
5.8
Moyenne
CVE-2024-1724
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…
6.3
Moyenne
CVE-2020-27352
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify…
9.3
Critique