Vulnerabilities > CVE-2017-14178 - Improper Handling of Exceptional Conditions vulnerability in Snapcraft Snapd
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Common Weakness Enumeration (CWE)
References
- https://github.com/snapcore/snapd/pull/4194
- https://github.com/snapcore/snapd/pull/4194
- https://launchpad.net/bugs/1730255
- https://launchpad.net/bugs/1730255
- https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14178.html
- https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-14178.html