CVE-2017-14178
CVE-2017-14178 is a high vulnerability (CVSS 7.5) in Canonical Ltd. Snapd, published February 2, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 77th percentile. Fixed in snapd 2.30-1.
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
CVE-2017-14178- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-755
- Updated
- 2026-11-02
CVE List No score
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
CVE-2017-14178- Updated
- 2026-11-02
EUVDEUVD-2017-5688 No score
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
EUVD-2017-5688- Updated
- 2026-11-03
OSV
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
CVE-2017-14178- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-14178
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
DEBIAN-CVE-2017-14178- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-14178
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
- Record
UBUNTU-CVE-2017-14178- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
snapdDebian:12 |
before 2.30-1 | 2.30-1 |
snapdDebian:13 |
before 2.30-1 | 2.30-1 |
snapdDebian:14 |
before 2.30-1 | 2.30-1 |
snapdUbuntu:14.04:LTS |
before 2.29.4.2~14.04, plus listed versions 2.21~14.04.22.22.2~14.042.22.3~14.042.22.6~14.042.23.1~14.04 Show 5 moreShow less2.24.1~14.042.25~14.042.26.10~14.042.27.5~14.042.28.5~14.04 |
2.29.4.2~14.04 |
snapdUbuntu:16.04:LTS |
before 2.29.4.2, plus listed versions 1.91.9.1.11.9.22.02.0.1 Show 24 moreShow less2.0.22.0.32.0.52.0.82.0.92.0.102.11+0.16.042.12+0.16.042.132.14.2~16.042.15.2ubuntu12.16ubuntu32.17.1ubuntu12.20.1ubuntu12.212.22.22.22.32.22.62.23.12.24.12.252.26.102.27.52.28.5 |
2.29.4.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases, products | EUVD |
| 2026-11-02 | created | CVE List, NVD, OSV |