PT-2021-11381 · Canonical+1 · Snapd+2

Gilad Reti + 1 · Published 2021-02-10 · Updated 2024-07-11 · CVE-2020-27352

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: snapd (affected versions not specified)

Description: The issue arises when generating systemd service units for the docker snap and similar snaps, as snapd fails to specify Delegate=yes. As a result, systemd moves processes from containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-27352

USN-4728-1

Affected Products

Linuxmint

Ubuntu

Snapd

References · 13

• 🔥 https://bugs.launchpad.net/snapd/+bug/1910456 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27352 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27352 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-27352 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-27352 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-27352 · Security Note
• https://ubuntu.com/security/CVE-2020-27352 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4728-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27352 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4728-1 · Vendor Advisory
• https://t.me/cvenotify/84166 · Telegram Post
• https://t.me/cvenotify/85838 · Telegram Post
• https://t.me/cvenotify/84087 · Telegram Post