Beveiligingsadvies

CVE-2016-1580

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-05-13 14:00:00
Laatst bijgewerkt 2024-08-05 23:02:11
Toegewezen door canonical
CVSS-score geen score
Status PUBLISHED

Beschrijving

The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."