Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-11503

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-11503
  • Canonical » Snapd » Version: N/A
    cpe:2.3:a:canonical:snapd:-
  • Canonical » Snapd » Version: 0.2
    cpe:2.3:a:canonical:snapd:0.2
  • Canonical » Snapd » Version: 0.2.10
    cpe:2.3:a:canonical:snapd:0.2.10
  • Canonical » Snapd » Version: 0.2.11
    cpe:2.3:a:canonical:snapd:0.2.11
  • Canonical » Snapd » Version: 0.2.12
    cpe:2.3:a:canonical:snapd:0.2.12
  • Canonical » Snapd » Version: 0.2.13
    cpe:2.3:a:canonical:snapd:0.2.13
  • Canonical » Snapd » Version: 0.2.3
    cpe:2.3:a:canonical:snapd:0.2.3
  • Canonical » Snapd » Version: 0.2.4
    cpe:2.3:a:canonical:snapd:0.2.4
  • Canonical » Snapd » Version: 0.2.8
    cpe:2.3:a:canonical:snapd:0.2.8
  • Canonical » Snapd » Version: 0.2.9
    cpe:2.3:a:canonical:snapd:0.2.9
  • Canonical » Snapd » Version: 1.0.1
    cpe:2.3:a:canonical:snapd:1.0.1
  • Canonical » Snapd » Version: 1.0.10
    cpe:2.3:a:canonical:snapd:1.0.10
  • Canonical » Snapd » Version: 1.0.11
    cpe:2.3:a:canonical:snapd:1.0.11
  • Canonical » Snapd » Version: 1.0.12
    cpe:2.3:a:canonical:snapd:1.0.12
  • Canonical » Snapd » Version: 1.0.13
    cpe:2.3:a:canonical:snapd:1.0.13
  • Canonical » Snapd » Version: 1.0.14
    cpe:2.3:a:canonical:snapd:1.0.14
  • Canonical » Snapd » Version: 1.0.15
    cpe:2.3:a:canonical:snapd:1.0.15
  • Canonical » Snapd » Version: 1.0.16
    cpe:2.3:a:canonical:snapd:1.0.16
  • Canonical » Snapd » Version: 1.0.17
    cpe:2.3:a:canonical:snapd:1.0.17
  • Canonical » Snapd » Version: 1.0.2
    cpe:2.3:a:canonical:snapd:1.0.2
  • Canonical » Snapd » Version: 1.0.20
    cpe:2.3:a:canonical:snapd:1.0.20
  • Canonical » Snapd » Version: 1.0.21
    cpe:2.3:a:canonical:snapd:1.0.21
  • Canonical » Snapd » Version: 1.0.22
    cpe:2.3:a:canonical:snapd:1.0.22
  • Canonical » Snapd » Version: 1.0.23
    cpe:2.3:a:canonical:snapd:1.0.23
  • Canonical » Snapd » Version: 1.0.24
    cpe:2.3:a:canonical:snapd:1.0.24
  • Canonical » Snapd » Version: 1.0.25
    cpe:2.3:a:canonical:snapd:1.0.25
  • Canonical » Snapd » Version: 1.0.25.1
    cpe:2.3:a:canonical:snapd:1.0.25.1
  • Canonical » Snapd » Version: 1.0.26
    cpe:2.3:a:canonical:snapd:1.0.26
  • Canonical » Snapd » Version: 1.0.27
    cpe:2.3:a:canonical:snapd:1.0.27
  • Canonical » Snapd » Version: 1.0.28
    cpe:2.3:a:canonical:snapd:1.0.28
  • Canonical » Snapd » Version: 1.0.29
    cpe:2.3:a:canonical:snapd:1.0.29
  • Canonical » Snapd » Version: 1.0.3
    cpe:2.3:a:canonical:snapd:1.0.3
  • Canonical » Snapd » Version: 1.0.30
    cpe:2.3:a:canonical:snapd:1.0.30
  • Canonical » Snapd » Version: 1.0.31
    cpe:2.3:a:canonical:snapd:1.0.31
  • Canonical » Snapd » Version: 1.0.32
    cpe:2.3:a:canonical:snapd:1.0.32
  • Canonical » Snapd » Version: 1.0.33
    cpe:2.3:a:canonical:snapd:1.0.33
  • Canonical » Snapd » Version: 1.0.34
    cpe:2.3:a:canonical:snapd:1.0.34
  • Canonical » Snapd » Version: 1.0.35
    cpe:2.3:a:canonical:snapd:1.0.35
  • Canonical » Snapd » Version: 1.0.36
    cpe:2.3:a:canonical:snapd:1.0.36
  • Canonical » Snapd » Version: 1.0.37
    cpe:2.3:a:canonical:snapd:1.0.37
  • Canonical » Snapd » Version: 1.0.38
    cpe:2.3:a:canonical:snapd:1.0.38
  • Canonical » Snapd » Version: 1.0.39
    cpe:2.3:a:canonical:snapd:1.0.39
  • Canonical » Snapd » Version: 1.0.4
    cpe:2.3:a:canonical:snapd:1.0.4
  • Canonical » Snapd » Version: 1.0.40
    cpe:2.3:a:canonical:snapd:1.0.40
  • Canonical » Snapd » Version: 1.0.41
    cpe:2.3:a:canonical:snapd:1.0.41
  • Canonical » Snapd » Version: 1.0.42
    cpe:2.3:a:canonical:snapd:1.0.42
  • Canonical » Snapd » Version: 1.0.42.1
    cpe:2.3:a:canonical:snapd:1.0.42.1
  • Canonical » Snapd » Version: 1.0.43
    cpe:2.3:a:canonical:snapd:1.0.43
  • Canonical » Snapd » Version: 1.0.44
    cpe:2.3:a:canonical:snapd:1.0.44
  • Canonical » Snapd » Version: 1.0.5
    cpe:2.3:a:canonical:snapd:1.0.5
  • Canonical » Snapd » Version: 1.0.6
    cpe:2.3:a:canonical:snapd:1.0.6
  • Canonical » Snapd » Version: 1.0.8
    cpe:2.3:a:canonical:snapd:1.0.8
  • Canonical » Snapd » Version: 1.0.9
    cpe:2.3:a:canonical:snapd:1.0.9
  • Canonical » Snapd » Version: 1.9
    cpe:2.3:a:canonical:snapd:1.9
  • Canonical » Snapd » Version: 1.9.1
    cpe:2.3:a:canonical:snapd:1.9.1
  • Canonical » Snapd » Version: 1.9.2
    cpe:2.3:a:canonical:snapd:1.9.2
  • Canonical » Snapd » Version: 1.9.3
    cpe:2.3:a:canonical:snapd:1.9.3
  • Canonical » Snapd » Version: 1.9.4
    cpe:2.3:a:canonical:snapd:1.9.4
  • Canonical » Snapd » Version: 1.9.4.1
    cpe:2.3:a:canonical:snapd:1.9.4.1
  • Canonical » Snapd » Version: 2.0
    cpe:2.3:a:canonical:snapd:2.0
  • Canonical » Snapd » Version: 2.0.1
    cpe:2.3:a:canonical:snapd:2.0.1
  • Canonical » Snapd » Version: 2.0.10
    cpe:2.3:a:canonical:snapd:2.0.10
  • Canonical » Snapd » Version: 2.0.2
    cpe:2.3:a:canonical:snapd:2.0.2
  • Canonical » Snapd » Version: 2.0.3
    cpe:2.3:a:canonical:snapd:2.0.3
  • Canonical » Snapd » Version: 2.0.4
    cpe:2.3:a:canonical:snapd:2.0.4
  • Canonical » Snapd » Version: 2.0.5
    cpe:2.3:a:canonical:snapd:2.0.5
  • Canonical » Snapd » Version: 2.0.6
    cpe:2.3:a:canonical:snapd:2.0.6
  • Canonical » Snapd » Version: 2.0.7
    cpe:2.3:a:canonical:snapd:2.0.7
  • Canonical » Snapd » Version: 2.0.8
    cpe:2.3:a:canonical:snapd:2.0.8
  • Canonical » Snapd » Version: 2.0.8.1
    cpe:2.3:a:canonical:snapd:2.0.8.1
  • Canonical » Snapd » Version: 2.0.9
    cpe:2.3:a:canonical:snapd:2.0.9
  • Canonical » Snapd » Version: 2.11
    cpe:2.3:a:canonical:snapd:2.11
  • Canonical » Snapd » Version: 2.12
    cpe:2.3:a:canonical:snapd:2.12
  • Canonical » Snapd » Version: 2.13
    cpe:2.3:a:canonical:snapd:2.13
  • Canonical » Snapd » Version: 2.14
    cpe:2.3:a:canonical:snapd:2.14
  • Canonical » Snapd » Version: 2.14.1
    cpe:2.3:a:canonical:snapd:2.14.1
  • Canonical » Snapd » Version: 2.14.2.16.04
    cpe:2.3:a:canonical:snapd:2.14.2.16.04
  • Canonical » Snapd » Version: 2.15
    cpe:2.3:a:canonical:snapd:2.15
  • Canonical » Snapd » Version: 2.15.1
    cpe:2.3:a:canonical:snapd:2.15.1
  • Canonical » Snapd » Version: 2.15.2
    cpe:2.3:a:canonical:snapd:2.15.2
  • Canonical » Snapd » Version: 2.16
    cpe:2.3:a:canonical:snapd:2.16
  • Canonical » Snapd » Version: 2.17
    cpe:2.3:a:canonical:snapd:2.17
  • Canonical » Snapd » Version: 2.17.1
    cpe:2.3:a:canonical:snapd:2.17.1
  • Canonical » Snapd » Version: 2.18
    cpe:2.3:a:canonical:snapd:2.18
  • Canonical » Snapd » Version: 2.18.1
    cpe:2.3:a:canonical:snapd:2.18.1
  • Canonical » Snapd » Version: 2.19
    cpe:2.3:a:canonical:snapd:2.19
  • Canonical » Snapd » Version: 2.20
    cpe:2.3:a:canonical:snapd:2.20
  • Canonical » Snapd » Version: 2.20.1
    cpe:2.3:a:canonical:snapd:2.20.1
  • Canonical » Snapd » Version: 2.20.1.14.04
    cpe:2.3:a:canonical:snapd:2.20.1.14.04
  • Canonical » Snapd » Version: 2.21
    cpe:2.3:a:canonical:snapd:2.21
  • Canonical » Snapd » Version: 2.21.14.04.1
    cpe:2.3:a:canonical:snapd:2.21.14.04.1
  • Canonical » Snapd » Version: 2.22
    cpe:2.3:a:canonical:snapd:2.22
  • Canonical » Snapd » Version: 2.22.1
    cpe:2.3:a:canonical:snapd:2.22.1
  • Canonical » Snapd » Version: 2.22.2
    cpe:2.3:a:canonical:snapd:2.22.2
  • Canonical » Snapd » Version: 2.22.3
    cpe:2.3:a:canonical:snapd:2.22.3
  • Canonical » Snapd » Version: 2.22.4
    cpe:2.3:a:canonical:snapd:2.22.4
  • Canonical » Snapd » Version: 2.22.5
    cpe:2.3:a:canonical:snapd:2.22.5
  • Canonical » Snapd » Version: 2.22.6
    cpe:2.3:a:canonical:snapd:2.22.6
  • Canonical » Snapd » Version: 2.22.7
    cpe:2.3:a:canonical:snapd:2.22.7
  • Canonical » Snapd » Version: 2.23
    cpe:2.3:a:canonical:snapd:2.23
  • Canonical » Snapd » Version: 2.23.1
    cpe:2.3:a:canonical:snapd:2.23.1
  • Canonical » Snapd » Version: 2.23.2
    cpe:2.3:a:canonical:snapd:2.23.2
  • Canonical » Snapd » Version: 2.23.3
    cpe:2.3:a:canonical:snapd:2.23.3
  • Canonical » Snapd » Version: 2.23.4
    cpe:2.3:a:canonical:snapd:2.23.4
  • Canonical » Snapd » Version: 2.23.5
    cpe:2.3:a:canonical:snapd:2.23.5
  • Canonical » Snapd » Version: 2.23.6
    cpe:2.3:a:canonical:snapd:2.23.6
  • Canonical » Snapd » Version: 2.24
    cpe:2.3:a:canonical:snapd:2.24
  • Canonical » Snapd » Version: 2.25
    cpe:2.3:a:canonical:snapd:2.25
  • Canonical » Snapd » Version: 2.26
    cpe:2.3:a:canonical:snapd:2.26
  • Canonical » Snapd » Version: 2.26.1
    cpe:2.3:a:canonical:snapd:2.26.1
  • Canonical » Snapd » Version: 2.26.10
    cpe:2.3:a:canonical:snapd:2.26.10
  • Canonical » Snapd » Version: 2.26.13
    cpe:2.3:a:canonical:snapd:2.26.13
  • Canonical » Snapd » Version: 2.26.14
    cpe:2.3:a:canonical:snapd:2.26.14
  • Canonical » Snapd » Version: 2.26.2
    cpe:2.3:a:canonical:snapd:2.26.2
  • Canonical » Snapd » Version: 2.26.3
    cpe:2.3:a:canonical:snapd:2.26.3
  • Canonical » Snapd » Version: 2.26.4
    cpe:2.3:a:canonical:snapd:2.26.4
  • Canonical » Snapd » Version: 2.26.5
    cpe:2.3:a:canonical:snapd:2.26.5
  • Canonical » Snapd » Version: 2.26.6
    cpe:2.3:a:canonical:snapd:2.26.6
  • Canonical » Snapd » Version: 2.26.8
    cpe:2.3:a:canonical:snapd:2.26.8
  • Canonical » Snapd » Version: 2.26.9
    cpe:2.3:a:canonical:snapd:2.26.9
  • Canonical » Snapd » Version: 2.27
    cpe:2.3:a:canonical:snapd:2.27
  • Canonical » Snapd » Version: 2.27.1
    cpe:2.3:a:canonical:snapd:2.27.1
  • Canonical » Snapd » Version: 2.27.2
    cpe:2.3:a:canonical:snapd:2.27.2
  • Canonical » Snapd » Version: 2.27.3
    cpe:2.3:a:canonical:snapd:2.27.3
  • Canonical » Snapd » Version: 2.27.4
    cpe:2.3:a:canonical:snapd:2.27.4
  • Canonical » Snapd » Version: 2.27.5
    cpe:2.3:a:canonical:snapd:2.27.5
  • Canonical » Snapd » Version: 2.27.6
    cpe:2.3:a:canonical:snapd:2.27.6
  • Canonical » Snapd » Version: 2.28
    cpe:2.3:a:canonical:snapd:2.28
  • Canonical » Snapd » Version: 2.28.1
    cpe:2.3:a:canonical:snapd:2.28.1
  • Canonical » Snapd » Version: 2.28.2
    cpe:2.3:a:canonical:snapd:2.28.2
  • Canonical » Snapd » Version: 2.28.3
    cpe:2.3:a:canonical:snapd:2.28.3
  • Canonical » Snapd » Version: 2.28.4
    cpe:2.3:a:canonical:snapd:2.28.4
  • Canonical » Snapd » Version: 2.28.5
    cpe:2.3:a:canonical:snapd:2.28.5
  • Canonical » Snapd » Version: 2.29
    cpe:2.3:a:canonical:snapd:2.29
  • Canonical » Snapd » Version: 2.29.1
    cpe:2.3:a:canonical:snapd:2.29.1
  • Canonical » Snapd » Version: 2.29.2
    cpe:2.3:a:canonical:snapd:2.29.2
  • Canonical » Snapd » Version: 2.29.3
    cpe:2.3:a:canonical:snapd:2.29.3
  • Canonical » Snapd » Version: 2.29.3.1
    cpe:2.3:a:canonical:snapd:2.29.3.1
  • Canonical » Snapd » Version: 2.29.4
    cpe:2.3:a:canonical:snapd:2.29.4
  • Canonical » Snapd » Version: 2.29.4.1
    cpe:2.3:a:canonical:snapd:2.29.4.1
  • Canonical » Snapd » Version: 2.29.4.2
    cpe:2.3:a:canonical:snapd:2.29.4.2
  • Canonical » Snapd » Version: 2.30
    cpe:2.3:a:canonical:snapd:2.30
  • Canonical » Snapd » Version: 2.31
    cpe:2.3:a:canonical:snapd:2.31
  • Canonical » Snapd » Version: 2.31.1
    cpe:2.3:a:canonical:snapd:2.31.1
  • Canonical » Snapd » Version: 2.31.2
    cpe:2.3:a:canonical:snapd:2.31.2
  • Canonical » Snapd » Version: 2.32
    cpe:2.3:a:canonical:snapd:2.32
  • Canonical » Snapd » Version: 2.32.1
    cpe:2.3:a:canonical:snapd:2.32.1
  • Canonical » Snapd » Version: 2.32.2
    cpe:2.3:a:canonical:snapd:2.32.2
  • Canonical » Snapd » Version: 2.32.3
    cpe:2.3:a:canonical:snapd:2.32.3
  • Canonical » Snapd » Version: 2.32.3.1
    cpe:2.3:a:canonical:snapd:2.32.3.1
  • Canonical » Snapd » Version: 2.32.3.2
    cpe:2.3:a:canonical:snapd:2.32.3.2
  • Canonical » Snapd » Version: 2.32.4
    cpe:2.3:a:canonical:snapd:2.32.4
  • Canonical » Snapd » Version: 2.32.5
    cpe:2.3:a:canonical:snapd:2.32.5
  • Canonical » Snapd » Version: 2.32.6
    cpe:2.3:a:canonical:snapd:2.32.6
  • Canonical » Snapd » Version: 2.32.7
    cpe:2.3:a:canonical:snapd:2.32.7
  • Canonical » Snapd » Version: 2.32.8
    cpe:2.3:a:canonical:snapd:2.32.8
  • Canonical » Snapd » Version: 2.32.9
    cpe:2.3:a:canonical:snapd:2.32.9
  • Canonical » Snapd » Version: 2.33
    cpe:2.3:a:canonical:snapd:2.33
  • Canonical » Snapd » Version: 2.33.1
    cpe:2.3:a:canonical:snapd:2.33.1
  • Canonical » Snapd » Version: 2.34
    cpe:2.3:a:canonical:snapd:2.34
  • Canonical » Snapd » Version: 2.34.1
    cpe:2.3:a:canonical:snapd:2.34.1
  • Canonical » Snapd » Version: 2.34.2
    cpe:2.3:a:canonical:snapd:2.34.2
  • Canonical » Snapd » Version: 2.34.3
    cpe:2.3:a:canonical:snapd:2.34.3
  • Canonical » Snapd » Version: 2.35
    cpe:2.3:a:canonical:snapd:2.35
  • Canonical » Snapd » Version: 2.35.1
    cpe:2.3:a:canonical:snapd:2.35.1
  • Canonical » Snapd » Version: 2.35.2
    cpe:2.3:a:canonical:snapd:2.35.2
  • Canonical » Snapd » Version: 2.35.3
    cpe:2.3:a:canonical:snapd:2.35.3
  • Canonical » Snapd » Version: 2.35.4
    cpe:2.3:a:canonical:snapd:2.35.4
  • Canonical » Snapd » Version: 2.35.5
    cpe:2.3:a:canonical:snapd:2.35.5
  • Canonical » Snapd » Version: 2.36
    cpe:2.3:a:canonical:snapd:2.36
  • Canonical » Snapd » Version: 2.36.1
    cpe:2.3:a:canonical:snapd:2.36.1
  • Canonical » Snapd » Version: 2.36.2
    cpe:2.3:a:canonical:snapd:2.36.2
  • Canonical » Snapd » Version: 2.36.3
    cpe:2.3:a:canonical:snapd:2.36.3
  • Canonical » Snapd » Version: 2.37
    cpe:2.3:a:canonical:snapd:2.37
  • Canonical » Snapd » Version: 2.37.1
    cpe:2.3:a:canonical:snapd:2.37.1
  • Canonical » Snapd » Version: 2.37.2
    cpe:2.3:a:canonical:snapd:2.37.2
  • Canonical » Snapd » Version: 2.37.3
    cpe:2.3:a:canonical:snapd:2.37.3
  • Canonical » Snapd » Version: 2.37.4
    cpe:2.3:a:canonical:snapd:2.37.4
  • Canonical » Snapd » Version: 2.38
    cpe:2.3:a:canonical:snapd:2.38


Contact Us

Shodan ® - All rights reserved