Snapd (Canonical) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 277 known versions, newest CVE from 2024-07-25. Vendor: Canonical.
CVEs of Snapd
- CVE-2024-29069 - CVSS 7.3 (high), 2024-07-25: In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs…
- CVE-2024-29068 - CVSS 6.6 (medium), 2024-07-25: In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so…
- CVE-2024-1724 - CVSS 8.2 (high), 2024-07-25: In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,…
- CVE-2020-27352 - CVSS 9.3 (critical), 2024-06-21: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move…
- CVE-2024-5138 - CVSS 8.1 (high), 2024-05-31: The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap. It was…
- CVE-2022-3328 - CVSS 7.8 (high), 2024-01-08: Race condition in snap-confine's must_mkdir_and_open_with_perms()
- CVE-2023-1523 - CVSS 10 (critical), 2023-09-01: Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary…
- CVE-2021-44730 - CVSS 8.8 (high), 2022-02-17: snapd 2.54.2 did not properly validate the location of the snap-confine binary. A local attacker who can hardlink this binary to another location to cause…
- CVE-2021-3155 - CVSS 5.5 (medium), 2022-02-17: snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to…
- CVE-2021-4120 - CVSS 8.2 (high), 2022-02-17: snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary…
- CVE-2021-44731 - CVSS 7.8 (high), 2022-02-17: A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to…
- CVE-2020-11934 - CVSS 5.9 (medium), 2020-07-29: It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in…
- CVE-2020-11933 - CVSS 7.3 (high), 2020-07-29: cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could…
- CVE-2019-11502 - CVSS 7.5 (high), 2019-04-24: snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user…
- CVE-2019-11503 - CVSS 7.5 (high), 2019-04-24: snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling…
- CVE-2019-7304 - CVSS 9.8 (critical), 2019-04-23: Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue…
- CVE-2019-7303 - CVSS 7.5 (high), 2019-04-23: A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit…
