SN
Product
Snapd
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 3Low 0
Watch
Add Snapd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1523 | 10.0 | Sep 1 | Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be… Affected: before 2.59.5 |
| CVE-2019-7304 | 9.8 | Apr 23 | Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root Affected: before 2.37.1 |
| CVE-2020-27352 | 8.8 | Jun 21 | When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the… Affected: before 2.48.3 |
| CVE-2021-44730 | 8.8 | Feb 17 | snapd 2.54.2 did not properly validate the location of the snap-confine binary Affected: through 2.54.2 |
| CVE-2024-1724 | 8.2 | Jul 25 | In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path Affected: before 2.62 |
| CVE-2024-5138 | 8.1 | May 31 | The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap Affected: 2.51.6 before 2.63.1 |
| CVE-2021-4120 | 7.8 | Feb 17 | snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via… Affected: through 2.54.2 |
| CVE-2021-44731 | 7.8 | Feb 17 | A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap Affected: through 2.54.2 |
| CVE-2019-11503 | 7.5 | Apr 24 | snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd… Affected: before 2.39 |
| CVE-2019-11502 | 7.5 | Apr 24 | snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user Affected: before 2.38 |
| CVE-2019-7303 | 7.5 | Apr 23 | A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host Affected: before 2.37.4 |
| CVE-2024-29069 | 7.3 | Jul 25 | In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap Affected: before 2.62 |
| CVE-2022-3328 | 7.0 | Jan 8 | Race condition in snap-confine's must_mkdir_and_open_with_perms() Affected: before 2.61.1 |
| CVE-2020-11933 | 6.8 | Jul 29 | cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting… Affected: before 2.45.2 |
| CVE-2024-29068 | 6.6 | Jul 25 | In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap Affected: before 2.62 |
| CVE-2021-3155 | 5.5 | Feb 17 | snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions Affected: before 2.54.3 |
Showing 16