Описание
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| snapd | fixed | 2.30-1 | package | |
| snapd | not-affected | stretch | package |
Примечания
https://launchpad.net/bugs/1730255
EPSS
Процентиль: 76%
0.01757
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
CVSS3: 7.5
nvd
больше 8 лет назад
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
EPSS
Процентиль: 76%
0.01757
Низкий