VDB
CVE-2020-27352
CVE-2020-27352
PUBLISHED
When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.
EPSS 0.14% · 34.4th percentile
Risk Scores
EPSS Score
0.14%
34.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | snapd | 2.32.3.2, 2.32.9, 2.33.1ubuntu2 |
| Ubuntu:18.04:LTS | snapd | 2.32.8+18.04, 2.28.5+17.10, 2.29.4.1+18.04 |
| Ubuntu:20.04:LTS | snapd | 0, 2.41+19.10.1, 2.42.1+20.04 |
Exploit Intelligence
Timeline
- Feb 10, 2021 CVE Published
- Jun 22, 2024 EPSS Score
- Jul 15, 2024 EPSS Score
- Aug 6, 2024 EPSS Score
- Aug 29, 2024 EPSS Score
- Sep 21, 2024 EPSS Score
- Oct 13, 2024 EPSS Score
- Nov 5, 2024 EPSS Score
- Nov 28, 2024 EPSS Score
- Dec 21, 2024 EPSS Score
- Jan 13, 2025 EPSS Score
- Feb 5, 2025 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-27352 third-party-advisory
- https://ubuntu.com/security/notices/USN-4728-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-27352 third-party-advisory