snapd vulnerabilities (Debian)
22 vulnerabilities.
-
snapdDebian snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup 7.8 High -
snapdDebian snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates 8.4 High -
snapdDebian AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd 5.6 Medium -
snapdDebian Local Privilege Escalation in snapd 7.8 High -
snapdDebian snapd allows $HOME/bin symlink 6.3 Medium -
snapdDebian CVE-2024-5138: snapd snapctl auth bypass 8.1 High -
snapdDebian snapd will follow archived symlinks when unpacking a filesystem 4.8 Medium -
snapdDebian snapd non-regular file indefinite blocking read 5.8 Medium -
snapdDebian Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the... 10.0 Critical -
snapdDebian snapd Race Condition vulnerability 7.8 High -
snapdDebian snapd could be made to escalate privileges and run programs as administrator 7.8 High -
snapdDebian snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths 8.2 High -
snapdDebian snapd could be made to escalate privileges and run programs as administrator 7.8 High -
snapdDebian When generating the systemd service units for the docker snap (and other similar snaps), snapd... 9.3 Critical -
snapdDebian snapd created ~/snap with too-wide permissions 3.8 Low -
snapdDebian Sandbox escape vulnerability via snapctl user-open (xdg-open) 5.9 Medium -
snapdDebian golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
snapdDebian snap-confine as included in snapd before 2.39 did not guard against symlink races when performing... 7.5 High -
snapdDebian snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid... 7.5 High -
snapdDebian Snapd seccomp filter TIOCSTI ioctl bypass 5.7 Medium -
snapdDebian Local privilege escalation via snapd socket 8.8 High -
snapdDebian In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces… 7.5 High