Lucene search

Ubuntu.comUB:CVE-2017-14178

HistoryFeb 02, 2018 - 12:00 a.m.

CVE-2017-14178

2018-02-0200:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

57.4%

JSON

In snapd 2.27 through 2.29.2 the ‘snap logs’ command could be made to call
journalctl without match arguments and therefore allow unprivileged,
unauthenticated users to bypass systemd-journald’s access restrictions.

Bugs

<https://launchpad.net/bugs/1730255>

Notes

Author	Note
jdstrand	2.29.3 upstream was released on 2017-11-27

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchsnapd< 2.29.4.2+17.10UNKNOWN
ubuntu14.04noarchsnapd< 2.29.4.2~14.04UNKNOWN
ubuntu16.04noarchsnapd< 2.29.4.2UNKNOWN
ubuntu17.04noarchsnapd< 2.29.4.2+17.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	17.10	noarch	snapd	< 2.29.4.2+17.10	UNKNOWN
ubuntu	14.04	noarch	snapd	< 2.29.4.2~14.04	UNKNOWN
ubuntu	16.04	noarch	snapd	< 2.29.4.2	UNKNOWN
ubuntu	17.04	noarch	snapd	< 2.29.4.2+17.04	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2017-14178

nvd.nist.gov/vuln/detail/CVE-2017-14178

security-tracker.debian.org/tracker/CVE-2017-14178

www.cve.org/CVERecord?id=CVE-2017-14178

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

57.4%

JSON

Related for UB:CVE-2017-14178