CVE-2020-27348: snapcraft may build snaps with incorrect LD_LIBRARY_PATH
First published: Fri Dec 04 2020(Updated: )
In some conditions, a snap package built by snapcraft includes the current directory in `LD_LIBRARY_PATH`, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.
Credit: security@ubuntu.com security@ubuntu.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <4.4.4 | ||
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| pip/snapcraft | <4.4.4 | 4.4.4 |
| Canonical Snapcraft | <4.4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugs.launchpad.net/bugs/1901572
- https://github.com/snapcore/snapcraft/pull/3345
- https://usn.ubuntu.com/usn/usn-4661-1
- https://launchpad.net/bugs/cve/CVE-2020-27348
- https://security-tracker.debian.org/tracker/CVE-2020-27348
- https://nvd.nist.gov/vuln/detail/CVE-2020-27348
- https://github.com/snapcore/snapcraft/commit/a0ceca9d531a34c979251030ed67b5fa2abfdd9a
- https://github.com/advisories/GHSA-qxm5-vx5j-pp6w (Advisory)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27348
- https://ubuntu.com/security/CVE-2020-27348
- https://github.com/pypa/advisory-database/tree/main/vulns/snapcraft/PYSEC-2020-109.yaml
- collector/nvd-index
- agent/author
- agent/type
- agent/severity
- agent/weakness
- agent/remedy
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- agent/title
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/softwarecombine
- agent/description
- agent/event
- agent/first-publish-date
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-qxm5-vx5j-pp6w
- alias/CVE-2020-27348
- agent/last-modified-date
- agent/references
- agent/tags
- collector/github-advisory
- agent/trending
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- canonical/canonical snapcraft
- package-manager/pip