Internet Bug Bounty: Canonical Snapcraft vulnerable to remote code execution under certain conditions

Preface: I apologize for previously submitting this bug to hacker1 before it was fully addressed by the Ubuntu Security Team I have reported this issue to the Ubuntu Security team and it has been fixed: CVE-2020-27348 Bug link: https://bugs.launchpad.net/snapcraft/+bug/1901572 Ubuntu Security Tea...

CVE-2020-27348

creationtimestamp| type| source ---|---|--- 2020-12-04 07:26:42+00:00| seen| https://t.me/cibsecurity/17140 2024-04-23 19:19:00+00:00| seen| https://t.me/arpsyndicate/4767...

CVE-2020-27348 snapcraft may build snaps with incorrect LD_LIBRARY_PATH

In some conditions, a snap package built by snapcraft includes the current directory in LDLIBRARYPATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to...

CVE-2020-27348

The CVE-2020-27348 issue is concrete: snapcraft builds can set LD_LIBRARY_PATH to include the current directory, enabling a malicious snap to execute code inside the context of another snap when both use the home interface. Affected are snapcraft before 4.4.4 and before 2.43.1+16.04.1/2.43.1+18.0...