CVE catalog

CVE-2017-14178

snapd: CVE-2017-14178

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.76% · Oct 25, 2026

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansnapdsid2.77.1-2fixed
Debiansnapdforky2.77.1-2fixed
Debiansnapdtrixie2.68.3-3+deb13u1fixed
Debiansnapdtrixie-security2.68.3-3+deb13u1fixed
Debiansnapdbookworm2.57.6-1+deb12u1fixed
Debiansnapdbookworm-security2.57.6-1+deb12u1fixed
Ubuntusnapd14.042.21~14.04.2vulnerable
Ubuntusnapd14.042.22.2~14.04vulnerable
Ubuntusnapd14.042.22.3~14.04vulnerable
Ubuntusnapd14.042.22.6~14.04vulnerable
Ubuntusnapd14.042.23.1~14.04vulnerable
Ubuntusnapd14.042.24.1~14.04vulnerable
Ubuntusnapd14.042.25~14.04vulnerable
Ubuntusnapd14.042.26.10~14.04vulnerable
Ubuntusnapd14.042.27.5~14.04vulnerable
Ubuntusnapd14.042.28.5~14.04vulnerable
Ubuntusnapd14.042.29.4.2~14.04fixed
Ubuntusnapd16.041.9vulnerable
Ubuntusnapd16.041.9.1.1vulnerable
Ubuntusnapd16.041.9.2vulnerable
Ubuntusnapd16.042.0vulnerable
Ubuntusnapd16.042.0.1vulnerable
Ubuntusnapd16.042.0.2vulnerable
Ubuntusnapd16.042.0.3vulnerable
Ubuntusnapd16.042.0.5vulnerable
Ubuntusnapd16.042.0.8vulnerable
Ubuntusnapd16.042.0.9vulnerable
Ubuntusnapd16.042.0.10vulnerable
Ubuntusnapd16.042.11+0.16.04vulnerable
Ubuntusnapd16.042.12+0.16.04vulnerable
Ubuntusnapd16.042.13vulnerable
Ubuntusnapd16.042.14.2~16.04vulnerable
Ubuntusnapd16.042.15.2ubuntu1vulnerable
Ubuntusnapd16.042.16ubuntu3vulnerable
Ubuntusnapd16.042.17.1ubuntu1vulnerable
Ubuntusnapd16.042.20.1ubuntu1vulnerable
Ubuntusnapd16.042.21vulnerable
Ubuntusnapd16.042.22.2vulnerable
Ubuntusnapd16.042.22.3vulnerable
Ubuntusnapd16.042.22.6vulnerable
Ubuntusnapd16.042.23.1vulnerable
Ubuntusnapd16.042.24.1vulnerable
Ubuntusnapd16.042.25vulnerable
Ubuntusnapd16.042.26.10vulnerable
Ubuntusnapd16.042.27.5vulnerable
Ubuntusnapd16.042.28.5vulnerable
Ubuntusnapd16.042.29.4.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansnapdsourcesid2.30-1not yet assignedNot reportedNot reported
Debiansnapdsourceforky2.30-1not yet assignedNot reportedNot reported
Debiansnapdsourcetrixie2.30-1not yet assignedNot reportedNot reported
Debiansnapdsourcebookworm2.30-1not yet assignedNot reportedNot reported
Ubuntusnapddeb14.042.29.4.2~14.04Not reportedUBUNTU-CVE-2017-14178Not reported
Ubuntusnapddeb16.042.29.4.2Not reportedUBUNTU-CVE-2017-14178Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [golang-github-snapcore-snapd-dev]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [snapd]Unknown
    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [ubuntu-core-launcher]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

[Debian 13 (Trixie)]

  • [golang-github-snapcore-snapd-dev]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

  • [snapd]Unknown
    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

  • [ubuntu-core-launcher]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.30-1

      dsa · snapd · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]