8.8
Élevée
CVE-2019-7304 Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run…
Description
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| snapd 2.37 | premières → < 2.37.1 | 2.37.1 |
Références
- usn.ubuntu.com usn.ubuntu.com
- www.exploit-db.com www.exploit-db.com
- www.exploit-db.com www.exploit-db.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de snapd
Les 9 CVE de snapd →
CVE-2024-29069
In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap
4.8
Moyenne
CVE-2024-29068
In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap
5.8
Moyenne
CVE-2024-1724
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…
6.3
Moyenne
CVE-2020-27352
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify…
9.3
Critique