CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11933

cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.1%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 4.6

References

Products affected by CVE-2020-11933

Canonical » Snapd » Version: N/A

cpe:2.3:a:canonical:snapd:-
Canonical » Snapd » Version: 0.2

cpe:2.3:a:canonical:snapd:0.2
Canonical » Snapd » Version: 0.2.10

cpe:2.3:a:canonical:snapd:0.2.10
Canonical » Snapd » Version: 0.2.11

cpe:2.3:a:canonical:snapd:0.2.11
Canonical » Snapd » Version: 0.2.12

cpe:2.3:a:canonical:snapd:0.2.12
Canonical » Snapd » Version: 0.2.13

cpe:2.3:a:canonical:snapd:0.2.13
Canonical » Snapd » Version: 0.2.3

cpe:2.3:a:canonical:snapd:0.2.3
Canonical » Snapd » Version: 0.2.4

cpe:2.3:a:canonical:snapd:0.2.4
Canonical » Snapd » Version: 0.2.8

cpe:2.3:a:canonical:snapd:0.2.8
Canonical » Snapd » Version: 0.2.9

cpe:2.3:a:canonical:snapd:0.2.9
Canonical » Snapd » Version: 1.0.1

cpe:2.3:a:canonical:snapd:1.0.1
Canonical » Snapd » Version: 1.0.10

cpe:2.3:a:canonical:snapd:1.0.10
Canonical » Snapd » Version: 1.0.11

cpe:2.3:a:canonical:snapd:1.0.11
Canonical » Snapd » Version: 1.0.12

cpe:2.3:a:canonical:snapd:1.0.12
Canonical » Snapd » Version: 1.0.13

cpe:2.3:a:canonical:snapd:1.0.13
Canonical » Snapd » Version: 1.0.14

cpe:2.3:a:canonical:snapd:1.0.14
Canonical » Snapd » Version: 1.0.15

cpe:2.3:a:canonical:snapd:1.0.15
Canonical » Snapd » Version: 1.0.16

cpe:2.3:a:canonical:snapd:1.0.16
Canonical » Snapd » Version: 1.0.17

cpe:2.3:a:canonical:snapd:1.0.17
Canonical » Snapd » Version: 1.0.2

cpe:2.3:a:canonical:snapd:1.0.2
Canonical » Snapd » Version: 1.0.20

cpe:2.3:a:canonical:snapd:1.0.20
Canonical » Snapd » Version: 1.0.21

cpe:2.3:a:canonical:snapd:1.0.21
Canonical » Snapd » Version: 1.0.22

cpe:2.3:a:canonical:snapd:1.0.22
Canonical » Snapd » Version: 1.0.23

cpe:2.3:a:canonical:snapd:1.0.23
Canonical » Snapd » Version: 1.0.24

cpe:2.3:a:canonical:snapd:1.0.24
Canonical » Snapd » Version: 1.0.25

cpe:2.3:a:canonical:snapd:1.0.25
Canonical » Snapd » Version: 1.0.25.1

cpe:2.3:a:canonical:snapd:1.0.25.1
Canonical » Snapd » Version: 1.0.26

cpe:2.3:a:canonical:snapd:1.0.26
Canonical » Snapd » Version: 1.0.27

cpe:2.3:a:canonical:snapd:1.0.27
Canonical » Snapd » Version: 1.0.28

cpe:2.3:a:canonical:snapd:1.0.28
Canonical » Snapd » Version: 1.0.29

cpe:2.3:a:canonical:snapd:1.0.29
Canonical » Snapd » Version: 1.0.3

cpe:2.3:a:canonical:snapd:1.0.3
Canonical » Snapd » Version: 1.0.30

cpe:2.3:a:canonical:snapd:1.0.30
Canonical » Snapd » Version: 1.0.31

cpe:2.3:a:canonical:snapd:1.0.31
Canonical » Snapd » Version: 1.0.32

cpe:2.3:a:canonical:snapd:1.0.32
Canonical » Snapd » Version: 1.0.33

cpe:2.3:a:canonical:snapd:1.0.33
Canonical » Snapd » Version: 1.0.34

cpe:2.3:a:canonical:snapd:1.0.34
Canonical » Snapd » Version: 1.0.35

cpe:2.3:a:canonical:snapd:1.0.35
Canonical » Snapd » Version: 1.0.36

cpe:2.3:a:canonical:snapd:1.0.36
Canonical » Snapd » Version: 1.0.37

cpe:2.3:a:canonical:snapd:1.0.37
Canonical » Snapd » Version: 1.0.38

cpe:2.3:a:canonical:snapd:1.0.38
Canonical » Snapd » Version: 1.0.39

cpe:2.3:a:canonical:snapd:1.0.39
Canonical » Snapd » Version: 1.0.4

cpe:2.3:a:canonical:snapd:1.0.4
Canonical » Snapd » Version: 1.0.40

cpe:2.3:a:canonical:snapd:1.0.40
Canonical » Snapd » Version: 1.0.41

cpe:2.3:a:canonical:snapd:1.0.41
Canonical » Snapd » Version: 1.0.42

cpe:2.3:a:canonical:snapd:1.0.42
Canonical » Snapd » Version: 1.0.42.1

cpe:2.3:a:canonical:snapd:1.0.42.1
Canonical » Snapd » Version: 1.0.43

cpe:2.3:a:canonical:snapd:1.0.43
Canonical » Snapd » Version: 1.0.44

cpe:2.3:a:canonical:snapd:1.0.44
Canonical » Snapd » Version: 1.0.5

cpe:2.3:a:canonical:snapd:1.0.5
Canonical » Snapd » Version: 1.0.6

cpe:2.3:a:canonical:snapd:1.0.6
Canonical » Snapd » Version: 1.0.8

cpe:2.3:a:canonical:snapd:1.0.8
Canonical » Snapd » Version: 1.0.9

cpe:2.3:a:canonical:snapd:1.0.9
Canonical » Snapd » Version: 1.9

cpe:2.3:a:canonical:snapd:1.9
Canonical » Snapd » Version: 1.9.1

cpe:2.3:a:canonical:snapd:1.9.1
Canonical » Snapd » Version: 1.9.2

cpe:2.3:a:canonical:snapd:1.9.2
Canonical » Snapd » Version: 1.9.3

cpe:2.3:a:canonical:snapd:1.9.3
Canonical » Snapd » Version: 1.9.4

cpe:2.3:a:canonical:snapd:1.9.4
Canonical » Snapd » Version: 1.9.4.1

cpe:2.3:a:canonical:snapd:1.9.4.1
Canonical » Snapd » Version: 2.0

cpe:2.3:a:canonical:snapd:2.0
Canonical » Snapd » Version: 2.0.1

cpe:2.3:a:canonical:snapd:2.0.1
Canonical » Snapd » Version: 2.0.10

cpe:2.3:a:canonical:snapd:2.0.10
Canonical » Snapd » Version: 2.0.2

cpe:2.3:a:canonical:snapd:2.0.2
Canonical » Snapd » Version: 2.0.3

cpe:2.3:a:canonical:snapd:2.0.3
Canonical » Snapd » Version: 2.0.4

cpe:2.3:a:canonical:snapd:2.0.4
Canonical » Snapd » Version: 2.0.5

cpe:2.3:a:canonical:snapd:2.0.5
Canonical » Snapd » Version: 2.0.6

cpe:2.3:a:canonical:snapd:2.0.6
Canonical » Snapd » Version: 2.0.7

cpe:2.3:a:canonical:snapd:2.0.7
Canonical » Snapd » Version: 2.0.8

cpe:2.3:a:canonical:snapd:2.0.8
Canonical » Snapd » Version: 2.0.8.1

cpe:2.3:a:canonical:snapd:2.0.8.1
Canonical » Snapd » Version: 2.0.9

cpe:2.3:a:canonical:snapd:2.0.9
Canonical » Snapd » Version: 2.11

cpe:2.3:a:canonical:snapd:2.11
Canonical » Snapd » Version: 2.12

cpe:2.3:a:canonical:snapd:2.12
Canonical » Snapd » Version: 2.13

cpe:2.3:a:canonical:snapd:2.13
Canonical » Snapd » Version: 2.14

cpe:2.3:a:canonical:snapd:2.14
Canonical » Snapd » Version: 2.14.1

cpe:2.3:a:canonical:snapd:2.14.1
Canonical » Snapd » Version: 2.14.2.16.04

cpe:2.3:a:canonical:snapd:2.14.2.16.04
Canonical » Snapd » Version: 2.15

cpe:2.3:a:canonical:snapd:2.15
Canonical » Snapd » Version: 2.15.1

cpe:2.3:a:canonical:snapd:2.15.1
Canonical » Snapd » Version: 2.15.2

cpe:2.3:a:canonical:snapd:2.15.2
Canonical » Snapd » Version: 2.16

cpe:2.3:a:canonical:snapd:2.16
Canonical » Snapd » Version: 2.17

cpe:2.3:a:canonical:snapd:2.17
Canonical » Snapd » Version: 2.17.1

cpe:2.3:a:canonical:snapd:2.17.1
Canonical » Snapd » Version: 2.18

cpe:2.3:a:canonical:snapd:2.18
Canonical » Snapd » Version: 2.18.1

cpe:2.3:a:canonical:snapd:2.18.1
Canonical » Snapd » Version: 2.19

cpe:2.3:a:canonical:snapd:2.19
Canonical » Snapd » Version: 2.20

cpe:2.3:a:canonical:snapd:2.20
Canonical » Snapd » Version: 2.20.1

cpe:2.3:a:canonical:snapd:2.20.1
Canonical » Snapd » Version: 2.20.1.14.04

cpe:2.3:a:canonical:snapd:2.20.1.14.04
Canonical » Snapd » Version: 2.21

cpe:2.3:a:canonical:snapd:2.21
Canonical » Snapd » Version: 2.21.14.04.1

cpe:2.3:a:canonical:snapd:2.21.14.04.1
Canonical » Snapd » Version: 2.22

cpe:2.3:a:canonical:snapd:2.22
Canonical » Snapd » Version: 2.22.1

cpe:2.3:a:canonical:snapd:2.22.1
Canonical » Snapd » Version: 2.22.2

cpe:2.3:a:canonical:snapd:2.22.2
Canonical » Snapd » Version: 2.22.3

cpe:2.3:a:canonical:snapd:2.22.3
Canonical » Snapd » Version: 2.22.4

cpe:2.3:a:canonical:snapd:2.22.4
Canonical » Snapd » Version: 2.22.5

cpe:2.3:a:canonical:snapd:2.22.5
Canonical » Snapd » Version: 2.22.6

cpe:2.3:a:canonical:snapd:2.22.6
Canonical » Snapd » Version: 2.22.7

cpe:2.3:a:canonical:snapd:2.22.7
Canonical » Snapd » Version: 2.23

cpe:2.3:a:canonical:snapd:2.23
Canonical » Snapd » Version: 2.23.1

cpe:2.3:a:canonical:snapd:2.23.1
Canonical » Snapd » Version: 2.23.2

cpe:2.3:a:canonical:snapd:2.23.2
Canonical » Snapd » Version: 2.23.3

cpe:2.3:a:canonical:snapd:2.23.3
Canonical » Snapd » Version: 2.23.4

cpe:2.3:a:canonical:snapd:2.23.4
Canonical » Snapd » Version: 2.23.5

cpe:2.3:a:canonical:snapd:2.23.5
Canonical » Snapd » Version: 2.23.6

cpe:2.3:a:canonical:snapd:2.23.6
Canonical » Snapd » Version: 2.24

cpe:2.3:a:canonical:snapd:2.24
Canonical » Snapd » Version: 2.25

cpe:2.3:a:canonical:snapd:2.25
Canonical » Snapd » Version: 2.26

cpe:2.3:a:canonical:snapd:2.26
Canonical » Snapd » Version: 2.26.1

cpe:2.3:a:canonical:snapd:2.26.1
Canonical » Snapd » Version: 2.26.10

cpe:2.3:a:canonical:snapd:2.26.10
Canonical » Snapd » Version: 2.26.13

cpe:2.3:a:canonical:snapd:2.26.13
Canonical » Snapd » Version: 2.26.14

cpe:2.3:a:canonical:snapd:2.26.14
Canonical » Snapd » Version: 2.26.2

cpe:2.3:a:canonical:snapd:2.26.2
Canonical » Snapd » Version: 2.26.3

cpe:2.3:a:canonical:snapd:2.26.3
Canonical » Snapd » Version: 2.26.4

cpe:2.3:a:canonical:snapd:2.26.4
Canonical » Snapd » Version: 2.26.5

cpe:2.3:a:canonical:snapd:2.26.5
Canonical » Snapd » Version: 2.26.6

cpe:2.3:a:canonical:snapd:2.26.6
Canonical » Snapd » Version: 2.26.8

cpe:2.3:a:canonical:snapd:2.26.8
Canonical » Snapd » Version: 2.26.9

cpe:2.3:a:canonical:snapd:2.26.9
Canonical » Snapd » Version: 2.27

cpe:2.3:a:canonical:snapd:2.27
Canonical » Snapd » Version: 2.27.1

cpe:2.3:a:canonical:snapd:2.27.1
Canonical » Snapd » Version: 2.27.2

cpe:2.3:a:canonical:snapd:2.27.2
Canonical » Snapd » Version: 2.27.3

cpe:2.3:a:canonical:snapd:2.27.3
Canonical » Snapd » Version: 2.27.4

cpe:2.3:a:canonical:snapd:2.27.4
Canonical » Snapd » Version: 2.27.5

cpe:2.3:a:canonical:snapd:2.27.5
Canonical » Snapd » Version: 2.27.6

cpe:2.3:a:canonical:snapd:2.27.6
Canonical » Snapd » Version: 2.28

cpe:2.3:a:canonical:snapd:2.28
Canonical » Snapd » Version: 2.28.1

cpe:2.3:a:canonical:snapd:2.28.1
Canonical » Snapd » Version: 2.28.2

cpe:2.3:a:canonical:snapd:2.28.2
Canonical » Snapd » Version: 2.28.3

cpe:2.3:a:canonical:snapd:2.28.3
Canonical » Snapd » Version: 2.28.4

cpe:2.3:a:canonical:snapd:2.28.4
Canonical » Snapd » Version: 2.28.5

cpe:2.3:a:canonical:snapd:2.28.5
Canonical » Snapd » Version: 2.29

cpe:2.3:a:canonical:snapd:2.29
Canonical » Snapd » Version: 2.29.1

cpe:2.3:a:canonical:snapd:2.29.1
Canonical » Snapd » Version: 2.29.2

cpe:2.3:a:canonical:snapd:2.29.2
Canonical » Snapd » Version: 2.29.3

cpe:2.3:a:canonical:snapd:2.29.3
Canonical » Snapd » Version: 2.29.3.1

cpe:2.3:a:canonical:snapd:2.29.3.1
Canonical » Snapd » Version: 2.29.4

cpe:2.3:a:canonical:snapd:2.29.4
Canonical » Snapd » Version: 2.29.4.1

cpe:2.3:a:canonical:snapd:2.29.4.1
Canonical » Snapd » Version: 2.29.4.2

cpe:2.3:a:canonical:snapd:2.29.4.2
Canonical » Snapd » Version: 2.30

cpe:2.3:a:canonical:snapd:2.30
Canonical » Snapd » Version: 2.31

cpe:2.3:a:canonical:snapd:2.31
Canonical » Snapd » Version: 2.31.1

cpe:2.3:a:canonical:snapd:2.31.1
Canonical » Snapd » Version: 2.31.2

cpe:2.3:a:canonical:snapd:2.31.2
Canonical » Snapd » Version: 2.32

cpe:2.3:a:canonical:snapd:2.32
Canonical » Snapd » Version: 2.32.1

cpe:2.3:a:canonical:snapd:2.32.1
Canonical » Snapd » Version: 2.32.2

cpe:2.3:a:canonical:snapd:2.32.2
Canonical » Snapd » Version: 2.32.3

cpe:2.3:a:canonical:snapd:2.32.3
Canonical » Snapd » Version: 2.32.3.1

cpe:2.3:a:canonical:snapd:2.32.3.1
Canonical » Snapd » Version: 2.32.3.2

cpe:2.3:a:canonical:snapd:2.32.3.2
Canonical » Snapd » Version: 2.32.4

cpe:2.3:a:canonical:snapd:2.32.4
Canonical » Snapd » Version: 2.32.5

cpe:2.3:a:canonical:snapd:2.32.5
Canonical » Snapd » Version: 2.32.6

cpe:2.3:a:canonical:snapd:2.32.6
Canonical » Snapd » Version: 2.32.7

cpe:2.3:a:canonical:snapd:2.32.7
Canonical » Snapd » Version: 2.32.8

cpe:2.3:a:canonical:snapd:2.32.8
Canonical » Snapd » Version: 2.32.9

cpe:2.3:a:canonical:snapd:2.32.9
Canonical » Snapd » Version: 2.33

cpe:2.3:a:canonical:snapd:2.33
Canonical » Snapd » Version: 2.33.1

cpe:2.3:a:canonical:snapd:2.33.1
Canonical » Snapd » Version: 2.34

cpe:2.3:a:canonical:snapd:2.34
Canonical » Snapd » Version: 2.34.1

cpe:2.3:a:canonical:snapd:2.34.1
Canonical » Snapd » Version: 2.34.2

cpe:2.3:a:canonical:snapd:2.34.2
Canonical » Snapd » Version: 2.34.3

cpe:2.3:a:canonical:snapd:2.34.3
Canonical » Snapd » Version: 2.35

cpe:2.3:a:canonical:snapd:2.35
Canonical » Snapd » Version: 2.35.1

cpe:2.3:a:canonical:snapd:2.35.1
Canonical » Snapd » Version: 2.35.2

cpe:2.3:a:canonical:snapd:2.35.2
Canonical » Snapd » Version: 2.35.3

cpe:2.3:a:canonical:snapd:2.35.3
Canonical » Snapd » Version: 2.35.4

cpe:2.3:a:canonical:snapd:2.35.4
Canonical » Snapd » Version: 2.35.5

cpe:2.3:a:canonical:snapd:2.35.5
Canonical » Snapd » Version: 2.36

cpe:2.3:a:canonical:snapd:2.36
Canonical » Snapd » Version: 2.36.1

cpe:2.3:a:canonical:snapd:2.36.1
Canonical » Snapd » Version: 2.36.2

cpe:2.3:a:canonical:snapd:2.36.2
Canonical » Snapd » Version: 2.36.3

cpe:2.3:a:canonical:snapd:2.36.3
Canonical » Snapd » Version: 2.37

cpe:2.3:a:canonical:snapd:2.37
Canonical » Snapd » Version: 2.37.1

cpe:2.3:a:canonical:snapd:2.37.1
Canonical » Snapd » Version: 2.37.2

cpe:2.3:a:canonical:snapd:2.37.2
Canonical » Snapd » Version: 2.37.3

cpe:2.3:a:canonical:snapd:2.37.3
Canonical » Snapd » Version: 2.37.4

cpe:2.3:a:canonical:snapd:2.37.4
Canonical » Snapd » Version: 2.38

cpe:2.3:a:canonical:snapd:2.38
Canonical » Snapd » Version: 2.39

cpe:2.3:a:canonical:snapd:2.39
Canonical » Snapd » Version: 2.39.1

cpe:2.3:a:canonical:snapd:2.39.1
Canonical » Snapd » Version: 2.39.2

cpe:2.3:a:canonical:snapd:2.39.2
Canonical » Snapd » Version: 2.39.3

cpe:2.3:a:canonical:snapd:2.39.3
Canonical » Snapd » Version: 2.40

cpe:2.3:a:canonical:snapd:2.40
Canonical » Snapd » Version: 2.41

cpe:2.3:a:canonical:snapd:2.41
Canonical » Snapd » Version: 2.42

cpe:2.3:a:canonical:snapd:2.42
Canonical » Snapd » Version: 2.42.1

cpe:2.3:a:canonical:snapd:2.42.1
Canonical » Snapd » Version: 2.42.2

cpe:2.3:a:canonical:snapd:2.42.2
Canonical » Snapd » Version: 2.42.3

cpe:2.3:a:canonical:snapd:2.42.3
Canonical » Snapd » Version: 2.42.4

cpe:2.3:a:canonical:snapd:2.42.4
Canonical » Snapd » Version: 2.42.5

cpe:2.3:a:canonical:snapd:2.42.5
Canonical » Snapd » Version: 2.43

cpe:2.3:a:canonical:snapd:2.43
Canonical » Snapd » Version: 2.43.1

cpe:2.3:a:canonical:snapd:2.43.1
Canonical » Snapd » Version: 2.43.2

cpe:2.3:a:canonical:snapd:2.43.2
Canonical » Snapd » Version: 2.43.3

cpe:2.3:a:canonical:snapd:2.43.3
Canonical » Snapd » Version: 2.44

cpe:2.3:a:canonical:snapd:2.44
Canonical » Snapd » Version: 2.44.1

cpe:2.3:a:canonical:snapd:2.44.1
Canonical » Snapd » Version: 2.44.2

cpe:2.3:a:canonical:snapd:2.44.2
Canonical » Snapd » Version: 2.44.3

cpe:2.3:a:canonical:snapd:2.44.3
Canonical » Snapd » Version: 2.44.4

cpe:2.3:a:canonical:snapd:2.44.4
Canonical » Snapd » Version: 2.44.5

cpe:2.3:a:canonical:snapd:2.44.5
Canonical » Snapd » Version: 2.45

cpe:2.3:a:canonical:snapd:2.45
Canonical » Snapd » Version: 2.45.1

cpe:2.3:a:canonical:snapd:2.45.1
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.10

cpe:2.3:o:canonical:ubuntu_linux:19.10
Canonical » Ubuntu Linux » Version: 20.04

cpe:2.3:o:canonical:ubuntu_linux:20.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11933

Products

Pricing

Contact Us