Canonical Snapd vulnerabilities

• canonical snap, snapd +1 more snapd allows $HOME/bin symlink CVE-2024-1724 Fix available 6.3 MediumJuly 1, 2024
• canonical snapd CVE-2024-5138: snapd snapctl auth bypass CVE-2024-5138 Fix available 8.1 HighMay 24, 2024
• canonical snapd snapd will follow archived symlinks when unpacking a filesystem CVE-2024-29069 Fix available 4.8 MediumMarch 14, 2024
• canonical snapd snapd non-regular file indefinite blocking read CVE-2024-29068 Fix available 5.8 MediumMarch 14, 2024
• canonical snapd, ubuntu linux +1 more Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the... CVE-2023-1523 Fix available 10.0 CriticalMay 25, 2023
• canonical snapd, ubuntu linux +1 more snapd Race Condition vulnerability CVE-2022-3328 Public exploitFix available 7.8 HighNovember 30, 2022
• canonical snapd, ubuntu linux, debian linux +1 more +3 more snapd could be made to escalate privileges and run programs as administrator CVE-2021-44730 Fix available 7.8 HighFebruary 17, 2022
• canonical snapd, ubuntu linux, fedoraproject fedora +2 more snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths CVE-2021-4120 Fix available 8.2 HighFebruary 17, 2022
• canonical snapd, ubuntu linux, debian linux +1 more +3 more snapd could be made to escalate privileges and run programs as administrator CVE-2021-44731 Public exploitFix available 7.8 HighFebruary 17, 2022
• canonical snapd, ubuntu linux +1 more When generating the systemd service units for the docker snap (and other similar snaps), snapd... CVE-2020-27352 Fix available 9.3 CriticalFebruary 10, 2021
• canonical snapd, ubuntu linux +1 more snapd created ~/snap with too-wide permissions CVE-2021-3155 Fix available 3.8 LowJanuary 13, 2021
• canonical core, snapd, ubuntu linux +2 more local snapd exploit through cloud-init CVE-2020-11933 7.3 HighJuly 29, 2020
• canonical snapd, ubuntu linux +1 more Sandbox escape vulnerability via snapctl user-open (xdg-open) CVE-2020-11934 Fix available 5.9 MediumJuly 15, 2020
• canonical snapd snap-confine as included in snapd before 2.39 did not guard against symlink races when performing... CVE-2019-11503 Fix available 7.5 HighApril 24, 2019
• canonical snapd snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid... CVE-2019-11502 Fix available 7.5 HighApril 24, 2019
• canonical snapd, ubuntu linux +1 more Snapd seccomp filter TIOCSTI ioctl bypass CVE-2019-7303 Public exploitFix available 5.7 MediumMarch 21, 2019
• canonical snapd, ubuntu linux +1 more Local privilege escalation via snapd socket CVE-2019-7304 Public exploitFix available EPSS 61.1% 8.8 HighFebruary 12, 2019