https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 07:14:53 +0000 https://cve.radiocsirt.org/vuln/cve-2020-27352 <p><strong>Affected:</strong> Canonical Ltd. snapd, canonical snapd</p> <p>When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.</p> <p><strong>Affected:</strong> Canonical Ltd. snapd, canonical snapd</p> <p>When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading system units. This may grant additional privileges to a container within the snap that were not originally intended.</p> https://cve.radiocsirt.org/vuln/cve-2020-27352 https://cve.radiocsirt.org/vuln/usn-4728-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: snapd, Ubuntu:18.04:LTS: snapd, Ubuntu:20.04:LTS: snapd</p> <p>Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for various container management snaps. This could allow a local attacker to escalate privileges via access to arbitrary devices of the container host from within a compromised or malicious container.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: snapd, Ubuntu:18.04:LTS: snapd, Ubuntu:20.04:LTS: snapd</p> <p>Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for various container management snaps. This could allow a local attacker to escalate privileges via access to arbitrary devices of the container host from within a compromised or malicious container.</p> https://cve.radiocsirt.org/vuln/usn-4728-1