| CVE-2024-29069 |
In snapd versions prior to 2.62, snapd failed to properly check the
destination of symbolic links when extracting a snap
|
4.8
Moyenne
|
25 juil. 2024 |
| CVE-2024-29068 |
In snapd versions prior to 2.62, snapd failed to properly check the file
type when extracting a snap
|
5.8
Moyenne
|
25 juil. 2024 |
| CVE-2024-1724 |
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict…
|
6.3
Moyenne
|
25 juil. 2024 |
| CVE-2020-27352 |
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify…
|
9.3
Critique
|
21 juin 2024 |
| CVE-2024-5138 |
The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged…
|
8.1
Élevée
|
31 mai 2024 |
| CVE-2020-11934 |
It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the…
|
5.9
Moyenne
|
29 juil. 2020 |
| CVE-2020-11933 |
cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every…
|
7.3
Élevée
|
29 juil. 2020 |
| CVE-2019-7304 |
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run…
|
8.8
Élevée
|
23 avr. 2019 |
| CVE-2019-7303 |
A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert…
|
5.7
Moyenne
|
23 avr. 2019 |