Canonical Ltd. snapd

• CVE-2020-27352 Critical 9.3 When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and m 0.3%
• CVE-2024-5138 High 8.1 The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap. It was found that snapctl did not properly parse c 0.8%
• CVE-2022-3328 High 7.8 Race condition in snap-confine's must_mkdir_and_open_with_perms() 0.4%
• CVE-2023-1523 Critical 10.0 Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap 1.4%
• CVE-2021-4120 High 8.2 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths 0.4%
• CVE-2021-44730 High 7.8 snapd could be made to escalate privileges and run programs as administrator 0.4%
• CVE-2021-3155 Low 3.8 snapd created ~/snap with too-wide permissions 0.3%
• CVE-2021-44731 High 7.8 snapd could be made to escalate privileges and run programs as administrator 1.0%