CVE-2020-27348
Last modified
CVE-2020-27348 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.. EPSS estimates a 0.67% chance of exploitation in the next 30 days.
Description
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Canonical | Snapcraft | < 4.4.4 |
| Canonical | Ubuntu Linux | 16.04 |
| Canonical | Ubuntu Linux | 18.04 |
References
- https://bugs.launchpad.net/bugs/1901572Exploit, Issue Tracking, Third Party Advisory
- https://github.com/snapcore/snapcraft/pull/3345Third Party Advisory
- https://usn.ubuntu.com/usn/usn-4661-1Patch, Third Party Advisory
- https://bugs.launchpad.net/bugs/1901572Exploit, Issue Tracking, Third Party Advisory
- https://github.com/snapcore/snapcraft/pull/3345Third Party Advisory
- https://usn.ubuntu.com/usn/usn-4661-1Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-27348?
How severe is CVE-2020-27348?
How do I fix CVE-2020-27348?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-27339In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers d…6.7
- CVE-2020-2734Vulnerability in the RDBMS/Optimizer component of Oracle Dat…2.4
- CVE-2020-27340The online help portal of Mitel MiCollab before 9.2 could al…6.1
- CVE-2020-27344The cm-download-manager plugin before 2.8.0 for WordPress al…6.1
- CVE-2020-27346Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-27347In tmux before version 3.1c the function input_csi_dispatch_…7.8
- CVE-2020-27349Aptdaemon performed policykit checks after interacting with …5.5
- CVE-2020-2735Vulnerability in the Java VM component of Oracle Database Se…8
- CVE-2020-27350APT had several integer overflows and underflows while parsi…5.7
- CVE-2020-27351Various memory and file descriptor leaks were found in apt-p…2.8
- CVE-2020-27352When generating the systemd service units for the docker sna…8.8
- CVE-2020-27353Rejected reason: CVE ID was once reserved, but never used.
Are you affected by CVE-2020-27348?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST