CVE catalog
CVE-2020-27348
UBUNTU-CVE-2020-27348
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.70% · Oct 25, 2026
It was discovered that Snapcraft includes the current directory when configuring LD_LIBRARY_PATH for application commands. If a user were tricked into installing a malicious snap or downloading a malicious library, under certain circumstances an attacker could exploit this to affect strict mode snaps that have access to the library and when launched from the directory containing the library.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | snapcraft | 16.04 | 0.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.5 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.6 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 1.0 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.0 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.0.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.1.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.3.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.3.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.5 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.6 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.6.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.7 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.8b | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.9 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.10.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.11 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.12 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.12.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.13.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.14 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.15.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.16 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.17 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.18.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.19 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.20 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.21 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.22.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.23 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.24 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.25 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.26 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.27 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.27.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.28 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.29 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.31 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.33 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.34 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.35 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.3+really2.35 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.40 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.41 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.42 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.42.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43.1+16.04.1 | fixed |
| Ubuntu | snapcraft | 18.04 | 2.34+17.10 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.39.2+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.40+18.04.1 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.40+18.04.3 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.41+18.04.1 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.41+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.42+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.42.1+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43.1+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43.1+18.04.1 | fixed |
| Ubuntu | snapcraft | 16.04 | 0.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.5 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 0.6 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 1.0 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.0 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.0.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.1.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.2.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.3.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.3.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.5 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.6 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.6.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.7 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.4 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.8.8b | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.9 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.10.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.11 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.12 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.12.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.13.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.14 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.15.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.16 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.17 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.18.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.19 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.20 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.21 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.22.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.23 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.24 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.25 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.26 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.27 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.27.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.28 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.29 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.31 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.33 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.34 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.35 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.2 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.3 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.39.3+really2.35 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.40 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.41 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.42 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.42.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43.1 | vulnerable |
| Ubuntu | snapcraft | 16.04 | 2.43.1+16.04.1 | fixed |
| Ubuntu | snapcraft | 18.04 | 2.34+17.10 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.39.2+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.40+18.04.1 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.40+18.04.3 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.41+18.04.1 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.41+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.42+18.04.2 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.42.1+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43.1+18.04 | vulnerable |
| Ubuntu | snapcraft | 18.04 | 2.43.1+18.04.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | snapcraft | deb | 16.04 | 2.43.1+16.04.1 | Not reported | USN-4661-1 | Not reported |
| Ubuntu | snapcraft | deb | 18.04 | 2.43.1+18.04.1 | Not reported | USN-4661-1 | Not reported |
| Ubuntu | snapcraft | deb | 16.04 | 2.43.1+16.04.1 | Not reported | UBUNTU-CVE-2020-27348 | Not reported |
| Ubuntu | snapcraft | deb | 18.04 | 2.43.1+18.04.1 | Not reported | UBUNTU-CVE-2020-27348 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: