CVE-2017-14178
HIGHsnapd <2.30 - Privilege Escalation
Title source: llmDescription
In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.
Scores
CVSS v3
7.5
EPSS
0.0117
EPSS Percentile
78.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-755
Status
published
Affected Products (1)
snapcraft/snapd
< 2.29.2
Timeline
Published
Feb 02, 2018
Tracked Since
Feb 18, 2026