snapd vulnerabilities (Ubuntu)
42 vulnerabilities.
-
snapdUbuntu Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
snapdUbuntu snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup 7.8 High -
snapdUbuntu snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates 8.4 High -
snapdUbuntu AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd 5.6 Medium -
snapdUbuntu Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
snapdUbuntu Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
snapdUbuntu Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh 10.0 Critical -
snapdUbuntu Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
snapdUbuntu Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
snapdUbuntu Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
snapdUbuntu Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
snapdUbuntu Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
snapdUbuntu Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
snapdUbuntu Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
snapdUbuntu Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
snapdUbuntu Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
snapdUbuntu Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
snapdUbuntu Local Privilege Escalation in snapd 7.8 High -
snapdUbuntu Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
snapdUbuntu Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
snapdUbuntu Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
snapdUbuntu snapd allows $HOME/bin symlink 6.3 Medium -
snapdUbuntu CVE-2024-5138: snapd snapctl auth bypass 8.1 High -
snapdUbuntu snapd will follow archived symlinks when unpacking a filesystem 4.8 Medium -
snapdUbuntu snapd non-regular file indefinite blocking read 5.8 Medium -
snapdUbuntu Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the... 10.0 Critical -
snapdUbuntu snapd Race Condition vulnerability 7.8 High -
snapdUbuntu gopkg.in/yaml.v3 Denial of Service 7.5 High -
snapdUbuntu snapd regression No score -
snapdUbuntu snapd could be made to escalate privileges and run programs as administrator 7.8 High -
snapdUbuntu snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths 8.2 High -
snapdUbuntu snapd could be made to escalate privileges and run programs as administrator 7.8 High -
snapdUbuntu When generating the systemd service units for the docker snap (and other similar snaps), snapd... 9.3 Critical -
snapdUbuntu snapd created ~/snap with too-wide permissions 3.8 Low -
snapdUbuntu Sandbox escape vulnerability via snapctl user-open (xdg-open) 5.9 Medium -
snapdUbuntu golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
snapdUbuntu snap-confine as included in snapd before 2.39 did not guard against symlink races when performing... 7.5 High -
snapdUbuntu snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid... 7.5 High -
snapdUbuntu Snapd seccomp filter TIOCSTI ioctl bypass 5.7 Medium -
snapdUbuntu Local privilege escalation via snapd socket 8.8 High -
snapdUbuntu In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces… 7.5 High -
snapdUbuntu golang.org/x/crypto/ssh Man-in-the-Middle attack 8.1 High