CVE-2017-14178

2018-02-0214:00:00

canonical

www.cve.org

EPSS

0.002

Percentile

57.4%

JSON

In snapd 2.27 through 2.29.2 the ‘snap logs’ command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald’s access restrictions.

CNA Affected

[
  {
    "product": "snapd",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.27 through 2.29.2"
      }
    ]
  }
]