Aller au contenu

Vulnérabilités de Canonical Ltd. snapd

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2020-27352 When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify… 9.3 Critique 21 juin 2024
CVE-2024-5138 The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged… 8.1 Élevée 31 mai 2024
CVE-2022-3328 Race condition in snap-confine's must_mkdir_and_open_with_perms() 7.8 Élevée 8 janv. 2024
CVE-2023-1523 Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal… 10.0 Critique 1 sept. 2023
CVE-2021-4120 snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability… 8.2 Élevée 17 févr. 2022
CVE-2021-44730 snapd 2.54.2 did not properly validate the location of the snap-confine binary 7.8 Élevée 17 févr. 2022
CVE-2021-3155 snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions 3.8 Faible 17 févr. 2022
CVE-2021-44731 A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap 7.8 Élevée 17 févr. 2022

Autres produits Canonical Ltd.