CVE-2020-27352
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jun 21, 2024
- Updated
- Aug 4, 2024
- Reserved
- Oct 20, 2020
Description
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.3 Critical | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | canonical |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
snapdCanonical Ltd. |
|
References
- https://bugs.launchpad.net/snapd/+bug/1910456issue-tracking
- https://ubuntu.com/security/notices/USN-4728-1vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-27352issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.