4044 matches found
CVE-2026-16552
The CVE-2026-16552 entries describe a vulnerability in systemd-tmpfiles: when processing tmpfiles.d entries that write to a file, an unprivileged local user can cause systemd-tmpfiles to follow a symbolic link, potentially redirecting a privileged write to an attacker-controlled file. The highest...
EUVD-2026-47736
A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes to a file, systemd-tmpfiles can follow a symbolic link placed by an unprivileged local user, and an existing safety check does not detect this specific case because it always treats transitions away...
CVE-2026-16552
The reported issue is invalid, as it requires root privileges to reproduce, and it is out of scope of the threat model of the affected component...
CVE-2026-16552
Removed by vendor...
PT-2026-63427
A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes to a file, systemd-tmpfiles can follow a symbolic link placed by an unprivileged local user, and an existing safety check does not detect this specific case because it always treats transitions away...
CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
USN-8579-1 snapd vulnerabilities
James Henstridge discovered that snapd's default apparmor template did not restrict access to systemd-userdbd varlink interface. A local attacker could possibly use this issue to obtain sensitive information. CVE-2024-5300 Qualys discovered that snap-confine can be tricked to create...
EUVD-2024-55693
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
CVE-2024-5300
The CVE concerns Canonical snapd’s base AppArmor profile misconfiguration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd allow strictly confined snaps to access io.systemd.Multiplexer and io.systemd.NameServiceSwitch sockets in /run/systemd/userdb/, bypassing sandbox restrictions....
CVE-2024-5300 AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
CVE-2024-5300 AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
UBUNTU-CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
PT-2026-61942
Name of the Vulnerable Software and Affected Versions Canonical snapd affected versions not specified Description An access control bypass and information disclosure issue exists in the base AppArmor security profile configuration. Abstraction rules in /etc/apparmor.d/abstractions/nss-systemd all...
CVE-2026-47128
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets concrete and abstract. This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version...
CVE-2026-47128
The CVE concerns the nono sandbox tool (pre-0.55.0) where Landlock/seccomp policies allowed access to local Unix domain sockets (concrete and abstract). This enabled sandbox escape by contacting the per-user systemd DBus socket, with the root cause being incomplete mediation of local IPC. Impact ...
CVE-2026-47128
nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets concrete and abstract. This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version...