Skip to contentCanonical Ltd. Snapd vulnerabilities
- canonical snapdCVE-2024-5138: snapd snapctl auth bypassCVE-2024-5138Fix available8.1 High
- canonical snapdsnapd will follow archived symlinks when unpacking a filesystemCVE-2024-29069Fix available4.8 Medium
- canonical snapdsnapd non-regular file indefinite blocking readCVE-2024-29068Fix available5.8 Medium
- canonical snapd, ubuntu linux +1 moreUsing the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the...CVE-2023-1523Fix available10.0 Critical
- canonical snapd, ubuntu linux +1 moresnapd Race Condition vulnerabilityCVE-2022-3328Public exploitFix available7.8 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- canonical snapd, ubuntu linux +1 moreWhen generating the systemd service units for the docker snap (and other similar snaps), snapd...CVE-2020-27352Fix available9.3 Critical
- canonical snapd, ubuntu linux +1 moresnapd created ~/snap with too-wide permissionsCVE-2021-3155Fix available3.8 Low
- canonical core, snapd, ubuntu linux +2 morelocal snapd exploit through cloud-initCVE-2020-119337.3 High
- canonical snapd, ubuntu linux +1 moreSandbox escape vulnerability via snapctl user-open (xdg-open)CVE-2020-11934Fix available5.9 Medium
- canonical snapd, ubuntu linux +1 moreSnapd seccomp filter TIOCSTI ioctl bypassCVE-2019-7303Public exploitFix available5.7 Medium
- canonical snapd, ubuntu linux +1 moreLocal privilege escalation via snapd socketCVE-2019-7304Public exploitFix availableEPSS 61.1%8.8 High
- canonical ltd. snapdIn snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces…CVE-2017-14178Fix available7.5 High