CVE catalog

CVE-2020-27352

snapd affected and fixed versions

[CVE catalog]

When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.

Severity
Critical · CVSS 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.26% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitysnapd2.68.3-3+deb13u1Fixed[CVE-2020-27352]
Debiantrixiesnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debiantrixiesnapd2.68.3-3+deb13u1Fixed[CVE-2020-27352]
Debiansidsnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debiansidsnapd2.77.1-2Fixed[CVE-2020-27352]
Debianforkysnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debianforkysnapd2.77.1-2Fixed[CVE-2020-27352]
Debianbookworm-securitysnapd2.57.6-1+deb12u1Fixed[CVE-2020-27352]
Debianbookwormsnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debianbookwormsnapd2.57.6-1+deb12u1Fixed[CVE-2020-27352]

Showing 10 fix observations. All 100 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedsnapd2.49-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormsnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debianbookwormsnapd2.57.6-1+deb12u1Fixed[CVE-2020-27352]
Debianbookworm-securitysnapd2.57.6-1+deb12u1Fixed[CVE-2020-27352]
Debianforkysnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debianforkysnapd2.77.1-2Fixed[CVE-2020-27352]
Debiansidsnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debiansidsnapd2.77.1-2Fixed[CVE-2020-27352]
Debiantrixiesnapd2.49-1FixedDistribution-reported fixed boundary[CVE-2020-27352]
Debiantrixiesnapd2.68.3-3+deb13u1Fixed[CVE-2020-27352]
Debiantrixie-securitysnapd2.68.3-3+deb13u1Fixed[CVE-2020-27352]
Ubuntu16.04snapd1.9UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd1.9.1.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd1.9.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.10UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.3UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.5UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.8UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.0.9UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.11+0.16.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.12+0.16.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.13UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.14.2~16.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.15.2ubuntu1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.16ubuntu3UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.17.1ubuntu1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.20.1ubuntu1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.21UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.22.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.22.3UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.22.6UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.23.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.24.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.25UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.26.10UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.27.5UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.28.5UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.29.4.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.32.3.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.32.9UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.33.1ubuntu2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.34.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.34.2ubuntu0.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.37.4UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.37.4ubuntu0.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.38UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.39.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.39.2ubuntu0.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.40UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.42.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.45.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.45.1ubuntu0.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.46.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.47.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.48UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu16.04snapd2.48.3UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.28.5+17.10UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.29.4.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.29.4.2+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.31.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32+18.04~pre5UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32+18.04~pre6UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32.3.2+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32.5+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32.8+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.32.9+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.33.1+18.04ubuntu2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.34.2+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.34.2+18.04.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.37.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.37.1.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.37.4+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.37.4+18.04.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.38+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.39.2+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.40+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.42.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.45.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.45.1+18.04.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.46.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.47.1+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.48+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu18.04snapd2.48.3+18.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.41+19.10.1UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.42.1+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.43.3+git1.8109f8UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.44+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.44.2+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.44.3+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.44~pre1+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.45.1+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.45.1+20.04.2UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.46.1+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.47.1+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.48+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Ubuntu20.04snapd2.48.3+20.04UnknownSource applicability is not established[USN-4728-1][UBUNTU-CVE-2020-27352]
Original provider fields
{
  "package_releases": [
    {
      "name": "snapd",
      "status": "fixed",
      "release": "sid",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "forky",
      "version": "2.77.1-2"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.68.3-3+deb13u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.57.6-1+deb12u1"
    },
    {
      "name": "snapd",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.57.6-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.49-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.49-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.49-1"
    },
    {
      "bug": null,
      "name": "snapd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.49-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "snapd",
      "fixed_version": "2.49-1",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.9",
        "1.9.1.1",
        "1.9.2",
        "2.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.0.5",
        "2.0.8",
        "2.0.9",
        "2.0.10",
        "2.11+0.16.04",
        "2.12+0.16.04",
        "2.13",
        "2.14.2~16.04",
        "2.15.2ubuntu1",
        "2.16ubuntu3",
        "2.17.1ubuntu1",
        "2.20.1ubuntu1",
        "2.21",
        "2.22.2",
        "2.22.3",
        "2.22.6",
        "2.23.1",
        "2.24.1",
        "2.25",
        "2.26.10",
        "2.27.5",
        "2.28.5",
        "2.29.4.2",
        "2.32.3.2",
        "2.32.9",
        "2.33.1ubuntu2",
        "2.34.2",
        "2.34.2ubuntu0.1",
        "2.37.4",
        "2.37.4ubuntu0.1",
        "2.38",
        "2.39.2",
        "2.39.2ubuntu0.2",
        "2.40",
        "2.42.1",
        "2.45.1",
        "2.45.1ubuntu0.2",
        "2.46.1",
        "2.47.1",
        "2.48"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4728-1",
      "fixed_version": "2.48.3",
      "provider_source": "pypi",
      "provider_record_id": "USN-4728-1",
      "provider_updated_at": "2026-02-10T04:42:03Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3+18.04"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.28.5+17.10",
        "2.29.4.1+18.04",
        "2.29.4.2+18.04",
        "2.31.1+18.04",
        "2.32+18.04~pre5",
        "2.32+18.04~pre6",
        "2.32+18.04",
        "2.32.3.2+18.04",
        "2.32.5+18.04",
        "2.32.8+18.04",
        "2.32.9+18.04",
        "2.33.1+18.04ubuntu2",
        "2.34.2+18.04",
        "2.34.2+18.04.1",
        "2.37.1+18.04",
        "2.37.1.1+18.04",
        "2.37.4+18.04",
        "2.37.4+18.04.1",
        "2.38+18.04",
        "2.39.2+18.04",
        "2.40+18.04",
        "2.42.1+18.04",
        "2.45.1+18.04",
        "2.45.1+18.04.2",
        "2.46.1+18.04",
        "2.47.1+18.04",
        "2.48+18.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4728-1",
      "fixed_version": "2.48.3+18.04",
      "provider_source": "pypi",
      "provider_record_id": "USN-4728-1",
      "provider_updated_at": "2026-02-10T04:42:03Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3+20.04"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.41+19.10.1",
        "2.42.1+20.04",
        "2.43.3+git1.8109f8",
        "2.44~pre1+20.04",
        "2.44+20.04",
        "2.44.2+20.04",
        "2.44.3+20.04",
        "2.45.1+20.04",
        "2.45.1+20.04.2",
        "2.46.1+20.04",
        "2.47.1+20.04",
        "2.48+20.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4728-1",
      "fixed_version": "2.48.3+20.04",
      "provider_source": "pypi",
      "provider_record_id": "USN-4728-1",
      "provider_updated_at": "2026-02-10T04:42:03Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.9",
        "1.9.1.1",
        "1.9.2",
        "2.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.0.5",
        "2.0.8",
        "2.0.9",
        "2.0.10",
        "2.11+0.16.04",
        "2.12+0.16.04",
        "2.13",
        "2.14.2~16.04",
        "2.15.2ubuntu1",
        "2.16ubuntu3",
        "2.17.1ubuntu1",
        "2.20.1ubuntu1",
        "2.21",
        "2.22.2",
        "2.22.3",
        "2.22.6",
        "2.23.1",
        "2.24.1",
        "2.25",
        "2.26.10",
        "2.27.5",
        "2.28.5",
        "2.29.4.2",
        "2.32.3.2",
        "2.32.9",
        "2.33.1ubuntu2",
        "2.34.2",
        "2.34.2ubuntu0.1",
        "2.37.4",
        "2.37.4ubuntu0.1",
        "2.38",
        "2.39.2",
        "2.39.2ubuntu0.2",
        "2.40",
        "2.42.1",
        "2.45.1",
        "2.45.1ubuntu0.2",
        "2.46.1",
        "2.47.1",
        "2.48"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-27352",
      "fixed_version": "2.48.3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-27352",
      "provider_updated_at": "2026-02-04T02:19:39.742743Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3+18.04"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.28.5+17.10",
        "2.29.4.1+18.04",
        "2.29.4.2+18.04",
        "2.31.1+18.04",
        "2.32+18.04~pre5",
        "2.32+18.04~pre6",
        "2.32+18.04",
        "2.32.3.2+18.04",
        "2.32.5+18.04",
        "2.32.8+18.04",
        "2.32.9+18.04",
        "2.33.1+18.04ubuntu2",
        "2.34.2+18.04",
        "2.34.2+18.04.1",
        "2.37.1+18.04",
        "2.37.1.1+18.04",
        "2.37.4+18.04",
        "2.37.4+18.04.1",
        "2.38+18.04",
        "2.39.2+18.04",
        "2.40+18.04",
        "2.42.1+18.04",
        "2.45.1+18.04",
        "2.45.1+18.04.2",
        "2.46.1+18.04",
        "2.47.1+18.04",
        "2.48+18.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-27352",
      "fixed_version": "2.48.3+18.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-27352",
      "provider_updated_at": "2026-02-04T02:19:39.742743Z",
      "applicability_unknown": true
    },
    {
      "name": "snapd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.48.3+20.04"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.41+19.10.1",
        "2.42.1+20.04",
        "2.43.3+git1.8109f8",
        "2.44~pre1+20.04",
        "2.44+20.04",
        "2.44.2+20.04",
        "2.44.3+20.04",
        "2.45.1+20.04",
        "2.45.1+20.04.2",
        "2.46.1+20.04",
        "2.47.1+20.04",
        "2.48+20.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-27352",
      "fixed_version": "2.48.3+20.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-27352",
      "provider_updated_at": "2026-02-04T02:19:39.742743Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [golang-github-snapcore-snapd-dev]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [snapd]Unknown
    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

  • [ubuntu-core-launcher]Unknown

    Source package: [snapd]

    Details (4)

    • 2.57.6-1+deb12u1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

    • 2.57.6-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · bookworm; dsa · snapd · debian · 12

[Debian 13 (Trixie)]

  • [golang-github-snapcore-snapd-dev]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

  • [snap-confine]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

  • [snapd]Unknown
    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

  • [ubuntu-core-launcher]Unknown

    Source package: [snapd]

    Details (4)

    • 2.68.3-3+deb13u1+b6 · amd64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1+b6 · arm64 · trixie

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

    • 2.68.3-3+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.49-1

      dsa · snapd · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]