Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-4424-1 (UBUNTU-CVE-2020-11933)

    Vulnerability from osv_ubuntu – Published: 2020-07-15 14:49 – Updated: 2026-02-10 04:41 – Source website
    VLAI
    Summary
    snapd vulnerabilities
    Details

    It was discovered that cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices ran on every boot without restrictions. A physical attacker could exploit this to craft cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. (CVE-2020-11933)

    It was discovered that snapctl user-open allowed altering the XDG_DATA_DIRS environment variable when calling the system xdg-open. A malicious snap could exploit this to bypass intended access restrictions to control how the host system xdg-open script opens the URL. This issue did not affect Ubuntu Core systems. (CVE-2020-11934)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-11934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "golang-github-snapcore-snapd-dev",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "golang-github-ubuntu-core-snappy-dev",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "snap-confine",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "snapd",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "snapd-xdg-open",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "ubuntu-core-launcher",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "ubuntu-core-snapd-units",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "ubuntu-snappy",
            "binary_version": "2.45.1ubuntu0.2"
          },
          {
            "binary_name": "ubuntu-snappy-cli",
            "binary_version": "2.45.1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "snapd",
        "purl": "pkg:deb/ubuntu/snapd@2.45.1ubuntu0.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.45.1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9",
        "1.9.1.1",
        "1.9.2",
        "2.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.0.5",
        "2.0.8",
        "2.0.9",
        "2.0.10",
        "2.11+0.16.04",
        "2.12+0.16.04",
        "2.13",
        "2.14.2~16.04",
        "2.15.2ubuntu1",
        "2.16ubuntu3",
        "2.17.1ubuntu1",
        "2.20.1ubuntu1",
        "2.21",
        "2.22.2",
        "2.22.3",
        "2.22.6",
        "2.23.1",
        "2.24.1",
        "2.25",
        "2.26.10",
        "2.27.5",
        "2.28.5",
        "2.29.4.2",
        "2.32.3.2",
        "2.32.9",
        "2.33.1ubuntu2",
        "2.34.2",
        "2.34.2ubuntu0.1",
        "2.37.4",
        "2.37.4ubuntu0.1",
        "2.38",
        "2.39.2",
        "2.39.2ubuntu0.2",
        "2.40",
        "2.42.1",
        "2.45.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-11934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "golang-github-snapcore-snapd-dev",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "golang-github-ubuntu-core-snappy-dev",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "snap-confine",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "snapd",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "snapd-xdg-open",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "ubuntu-core-launcher",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "ubuntu-core-snapd-units",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "ubuntu-snappy",
            "binary_version": "2.45.1+18.04.2"
          },
          {
            "binary_name": "ubuntu-snappy-cli",
            "binary_version": "2.45.1+18.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "snapd",
        "purl": "pkg:deb/ubuntu/snapd@2.45.1+18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.45.1+18.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.28.5+17.10",
        "2.29.4.1+18.04",
        "2.29.4.2+18.04",
        "2.31.1+18.04",
        "2.32+18.04~pre5",
        "2.32+18.04~pre6",
        "2.32+18.04",
        "2.32.3.2+18.04",
        "2.32.5+18.04",
        "2.32.8+18.04",
        "2.32.9+18.04",
        "2.33.1+18.04ubuntu2",
        "2.34.2+18.04",
        "2.34.2+18.04.1",
        "2.37.1+18.04",
        "2.37.1.1+18.04",
        "2.37.4+18.04",
        "2.37.4+18.04.1",
        "2.38+18.04",
        "2.39.2+18.04",
        "2.40+18.04",
        "2.42.1+18.04",
        "2.45.1+18.04"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2020-11934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "golang-github-snapcore-snapd-dev",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "golang-github-ubuntu-core-snappy-dev",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "snap-confine",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "snapd",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "snapd-xdg-open",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "ubuntu-core-launcher",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "ubuntu-core-snapd-units",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "ubuntu-snappy",
            "binary_version": "2.45.1+20.04.2"
          },
          {
            "binary_name": "ubuntu-snappy-cli",
            "binary_version": "2.45.1+20.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "snapd",
        "purl": "pkg:deb/ubuntu/snapd@2.45.1+20.04.2?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.45.1+20.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.41+19.10.1",
        "2.42.1+20.04",
        "2.43.3+git1.8109f8",
        "2.44~pre1+20.04",
        "2.44+20.04",
        "2.44.2+20.04",
        "2.44.3+20.04",
        "2.45.1+20.04"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that cloud-init as managed by snapd on Ubuntu Core 16 and\nUbuntu Core 18 devices ran on every boot without restrictions. A physical\nattacker could exploit this to craft cloud-init user-data/meta-data via\nexternal media to perform arbitrary changes on the device to bypass\nintended security mechanisms such as full disk encryption. This issue did\nnot affect traditional Ubuntu systems. (CVE-2020-11933)\n\nIt was discovered that snapctl user-open allowed altering the XDG_DATA_DIRS \nenvironment variable when calling the system xdg-open. A malicious snap \ncould exploit this to bypass intended access restrictions to control how\nthe host system xdg-open script opens the URL. This issue did not affect \nUbuntu Core systems. (CVE-2020-11934)\n",
  "id": "USN-4424-1",
  "modified": "2026-02-10T04:41:52Z",
  "published": "2020-07-15T14:49:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4424-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-11933"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2020-11934"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "snapd vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2020-11933",
    "UBUNTU-CVE-2020-11934"
  ]
}