{"id":"CVE-2020-27352","state":"PUBLISHED","title":"When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the cont","description":"When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.","publishedAt":"2024-06-21T20:06:37.992Z","updatedAt":"2024-08-04T16:11:36.612Z","severity":{"score":9.3,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"canonical"},"assigner":"canonical","products":["Canonical Ltd. snapd"],"affected":[{"vendor":"Canonical Ltd.","product":"snapd","packageName":"snapd","versions":[{"version":"0","status":"affected","lessThan":"2.48.3","versionType":"semver"}],"repo":"https://github.com/snapcore/snapd","platforms":["Linux"]}],"references":["https://bugs.launchpad.net/snapd/+bug/1910456","https://ubuntu.com/security/notices/USN-4728-1","https://www.cve.org/CVERecord?id=CVE-2020-27352"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T19:47:11.046Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/27xxx/CVE-2020-27352.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-27352","state":"PUBLISHED","datePublished":"2024-06-21T20:06:37.992Z","dateUpdated":"2024-08-04T16:11:36.612Z","assignerShortName":"canonical","assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateReserved":"2020-10-20T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended."}],"affected":[{"vendor":"Canonical Ltd.","product":"snapd","packageName":"snapd","versions":[{"version":"0","status":"affected","lessThan":"2.48.3","versionType":"semver"}],"repo":"https://github.com/snapcore/snapd","platforms":["Linux"]}],"references":[{"url":"https://bugs.launchpad.net/snapd/+bug/1910456","tags":["issue-tracking"]},{"url":"https://ubuntu.com/security/notices/USN-4728-1","tags":["vendor-advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27352","tags":["issue-tracking"]}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL"}}],"providerMetadata":{"shortName":"canonical","orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","dateUpdated":"2024-06-21T20:06:37.992Z"},"credits":[{"lang":"en","type":"finder","value":"Gilad Reti"},{"lang":"en","type":"finder","value":"Nimrod Stoler"}]},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"canonical","product":"snapd","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"2.48.3","versionType":"custom"}],"cpes":["cpe:2.3:a:canonical:snapd:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-05T13:14:07.392127Z","id":"CVE-2020-27352","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","type":"CWE","lang":"en","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-09T20:56:52.326Z"}},{"title":"CVE Program Container","references":[{"url":"https://bugs.launchpad.net/snapd/+bug/1910456","tags":["issue-tracking","x_transferred"]},{"url":"https://ubuntu.com/security/notices/USN-4728-1","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27352","tags":["issue-tracking","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T16:11:36.612Z"}}]}}}