CVE-2020-11933
Last modified
CVE-2020-11933 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Snapd | < 2.45.2 |
| Canonical | Ubuntu Linux | 16.04 |
| Canonical | Ubuntu Linux | 18.04 |
| Canonical | Ubuntu Linux | 19.10 |
| Canonical | Ubuntu Linux | 20.04 |
References
- https://launchpad.net/bugs/1879530Third Party Advisory
- https://ubuntu.com/USN-4424-1Vendor Advisory
- https://launchpad.net/bugs/1879530Third Party Advisory
- https://ubuntu.com/USN-4424-1Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-11933?
How severe is CVE-2020-11933?
How do I fix CVE-2020-11933?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-11926An issue was discovered in Luvion Grand Elite 3 Connect thro…7.5
- CVE-2020-11928In the media-library-assistant plugin before 2.82 for WordPr…9.8
- CVE-2020-1193<p>A remote code execution vulnerability exists in Microsoft…7.8
- CVE-2020-11930The GTranslate plugin before 2.8.52 for WordPress has Reflec…6.1
- CVE-2020-11931An Ubuntu-specific modification to Pulseaudio to provide sec…3.3
- CVE-2020-11932It was discovered that the Subiquity installer for Ubuntu Se…2.3
- CVE-2020-11934It was discovered that snapctl user-open allowed altering th…5.9
- CVE-2020-11935It was discovered that aufs improperly managed inode referen…5.5
- CVE-2020-11936gdbus setgid privilege escalation3.1
- CVE-2020-11937In whoopsie, parse_report() from whoopsie.c allows a local a…5.5
- CVE-2020-11938In JetBrains TeamCity 2018.2 through 2019.2.1, a project adm…4.9
- CVE-2020-11939In nDPI through 3.2 Stable, the SSH protocol dissector has m…9.8
Are you affected by CVE-2020-11933?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST