 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2020-27352 |
| Description: | When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.844823 1.3.6.1.4.1.25623.1.0.878944 1.3.6.1.4.1.25623.1.0.878950 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2020-27352 https://bugs.launchpad.net/snapd/+bug/1910456 https://bugs.launchpad.net/snapd/+bug/1910456 https://ubuntu.com/security/notices/USN-4728-1 https://ubuntu.com/security/notices/USN-4728-1 https://www.cve.org/CVERecord?id=CVE-2020-27352 https://www.cve.org/CVERecord?id=CVE-2020-27352 |