CVE-2017-14178 In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/snapd(Debian:12) | < 2.30-1 | 2.30-1 |
| debian/snapd(Debian:13) | < 2.30-1 | 2.30-1 |
| debian/snapd(Debian:14) | < 2.30-1 | 2.30-1 |
| snapcraft snapd | >= 2.27, <= 2.29.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-14178 vendor-advisory
- github.com issue-tracking third-party-advisory
- launchpad.net issue-tracking patch
- people.canonical.com patch vendor-advisory