CVE-2020-27352
published 2024-06-21CVE-2020-27352: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move…
PriorityP343high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.26%
17.0th percentile
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | snapd | < 2.48.3 | 2.48.3 |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical_ltd | snapd | < 2.48.3 | 2.48.3 |
| debian | snapd | < snapd 2.49-1 (bookworm) | snapd 2.49-1 (bookworm) |
| snapcraft | snapd | >= 0 < 2.49-1 | 2.49-1 |
| snapcraft | snapd | >= 0 < 2.49-1 | 2.49-1 |
| snapcraft | snapd | >= 0 < 2.49-1 | 2.49-1 |
| snapcraft | snapd | >= 0 < 2.49-1 | 2.49-1 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
osv8.8HIGH
vendor_debian9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3hqj-7v65-62fj: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd wil
ghsa_unreviewed·2024-06-21
CVE-2020-27352 [CRITICAL] CWE-269 GHSA-3hqj-7v65-62fj: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd wil
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
OSV
CVE-2020-27352: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd wil
osv·2024-06-21·CVSS 8.8
CVE-2020-27352 [HIGH] CVE-2020-27352: When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd wil
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
Ubuntu
snapd vulnerability
vendor_ubuntu·2021-02-10
CVE-2020-27352 snapd vulnerability
Title: snapd vulnerability
Summary: An intended access restriction in snapd could be bypassed by container
management snaps.
Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup
delegation when generating systemd service units for various container
management snaps. This could allow a local attacker to escalate privileges
via access to arbitrary devices of the container host from within a
compromised or malicious container.
Instructions: In general, a standard system update will make all the necessary changes.
On Ubuntu, snapd will automatically refresh itself to snapd 2.48.3 which is
unaffected. Affected container management snaps will also automatically
refresh which will restart containers and resolve this vulnerability.
Debian
CVE-2020-27352: snapd - When generating the systemd service units for the docker snap (and other similar...
vendor_debian·2020·CVSS 9.3
CVE-2020-27352 [CRITICAL] CVE-2020-27352: snapd - When generating the systemd service units for the docker snap (and other similar...
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
Scope: local
bookworm: resolved (fixed in 2.49-1)
bullseye: resolved (fixed in 2.49-1)
forky: resolved (fixed in 2.49-1)
sid: resolved (fixed in 2.49-1)
trixie: resolved (fixed in 2.49-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-21
Published