Beveiligingsadvies

CVE-2019-7304

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-23 15:57:32
Laatst bijgewerkt 2024-09-16 18:38:22
Toegewezen door canonical
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.