CVE-2017-10600

ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2017-07-11

Last modified

2024-08-05

Weaknesses

CWE-384

Affected products

• Ubuntu-image (Canonical)

References

• https://forum.snapcraft.io/t/ownership-bug-in-ubuntu-image/1285