Lucene search
GoogleOSV:USN-4661-1HistoryDec 03, 2020 - 6:35 p.m.
snapcraft vulnerability
2020-12-0318:35:20
Google
osv.dev
3
0.001 Low
EPSS
Percentile
38.8%
It was discovered that Snapcraft includes the current directory when
configuring LD_LIBRARY_PATH for application commands. If a user were
tricked into installing a malicious snap or downloading a malicious
library, under certain circumstances an attacker could exploit this to
affect strict mode snaps that have access to the library and when
launched from the directory containing the library.
Related
osv
osv
PYSEC-2020-109
2020-12-04 03:15:00
CVE-2020-27348
2020-12-04 03:15:00
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
cvelist
cvelist
CVE-2020-27348 snapcraft may build snaps with incorrect LD_LIBRARY_PATH
2020-12-03 00:00:00
github
github
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
veracode
veracode
Arbitrary Code Execution
2024-04-30 06:49:57
nvd
nvd
CVE-2020-27348
2020-12-04 03:15:12
cve
cve
CVE-2020-27348
2020-12-04 03:15:12
ubuntu
ubuntu
Snapcraft vulnerability
2020-12-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4661-1)
2020-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2020-27348
2020-12-03 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)
2020-12-04 00:00:00
prion
prion
Design/Logic Flaw
2020-12-04 03:15:00
hackerone
hackerone