Lucene search
PRIOn knowledge basePRION:CVE-2020-27348HistoryDec 04, 2020 - 3:15 a.m.
Design/Logic Flaw
2020-12-0403:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
38.8%
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snapcraft | lt | 4.4.4 | |
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 |
Related
osv
osv
PYSEC-2020-109
2020-12-04 03:15:00
CVE-2020-27348
2020-12-04 03:15:00
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
cvelist
cvelist
CVE-2020-27348 snapcraft may build snaps with incorrect LD_LIBRARY_PATH
2020-12-03 00:00:00
github
github
snapcraft Access Restriction Bypass
2022-05-24 17:35:23
veracode
veracode
Arbitrary Code Execution
2024-04-30 06:49:57
nvd
nvd
CVE-2020-27348
2020-12-04 03:15:12
cve
cve
CVE-2020-27348
2020-12-04 03:15:12
ubuntu
ubuntu
Snapcraft vulnerability
2020-12-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4661-1)
2020-12-04 00:00:00
ubuntucve
ubuntucve
CVE-2020-27348
2020-12-03 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Snapcraft vulnerability (USN-4661-1)
2020-12-04 00:00:00
hackerone
hackerone