CVE-2020-27348

snapcraft may build snaps with incorrect LD_LIBRARY_PATH

State: Published
Severity: 6.8 Medium
Published: Dec 4, 2020
Updated: Sep 16, 2024
Reserved: Oct 20, 2020

Description

In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L	canonical

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
snapcraftCanonical	4.4 to before 4.4.4Affected 2.43.1 to before 2.43.1+16.04.1Affectedfrom 2.43.1+18.04.1Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.