Lucene search
GoogleOSV:PYSEC-2020-109HistoryDec 04, 2020 - 3:15 a.m.
PYSEC-2020-109
2020-12-0403:15:00
Google
osv.dev
3
0.001 Low
EPSS
Percentile
38.8%
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.
Related
cvelist
cvelist
CVE-2020-27348 snapcraft may build snaps with incorrect LD_LIBRARY_PATH
2020-12-03 00:00:00
osv
osv
CVE-2020-27348
2020-12-04 03:15:00
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
snapcraft vulnerability
2020-12-03 18:35:20
github
github
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
veracode
veracode
Arbitrary Code Execution
2024-04-30 06:49:57
nvd
nvd
CVE-2020-27348
2020-12-04 03:15:12
cve
cve
CVE-2020-27348
2020-12-04 03:15:12
ubuntu
ubuntu
Snapcraft vulnerability
2020-12-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4661-1)
2020-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2020-27348
2020-12-03 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)
2020-12-04 00:00:00
prion
prion
Design/Logic Flaw
2020-12-04 03:15:00
hackerone
hackerone