CVE-2017-10600
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting...
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
- Record
CVE-2017-10600- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-384
- Updated
- 2026-11-02
CVE List No score
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
- Record
CVE-2017-10600- Updated
- 2026-11-02
EUVDEUVD-2017-2247 No score
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
- Record
EUVD-2017-2247- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-759q-44f5-mjxr
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting...
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
- Record
GHSA-759q-44f5-mjxr- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-384
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-10600
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories.
- Record
UBUNTU-CVE-2017-10600- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ubuntu-imageUbuntu:16.04:LTS |
All versions, plus listed versions 0.9+16.04ubuntu10.11+16.04ubuntu10.12+16.04ubuntu10.14+16.04ubuntu20.15+16.04ubuntu1 Show 11 moreShow less1.0+16.04ubuntu11.1+16.04ubuntu41.3+16.04ubuntu21.4+16.04ubuntu21.5+16.04ubuntu11.6+16.04ubuntu11.7+16.04ubuntu11.8+16.04ubuntu11.9+16.04ubuntu11.10+16.04ubuntu11.11+16.04ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-10600 is a medium vulnerability (CVSS 5.9) in Canonical Ubuntu-image, published July 11, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.
References
forum.snapcraft.io/t/ownership-bug-in-ubuntu-image/1285
nvd.nist.gov/vuln/detail/CVE-2017-10600
github.com/advisories/GHSA-759q-44f5-mjxr
ubuntu.com/security/CVE-2017-10600
cve.org/CVERecord?id=CVE-2017-10600