CVE-2020-11934: canonical snapd Exposure of Resource to Wrong Sphere
Vulnerability summary
CVE-2020-11934 is a medium (CVSS 5.9) Exposure of Resource to Wrong Sphere vulnerability in canonical snapd. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.8% of scored vulnerabilities.
Timeline
- 29-07-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this to bypass intended access restrictions to control how the host system xdg-open script opens the URL and, for example, execute a script shipped with the snap without confinement. This issue did not affect Ubuntu Core systems. Fixed in snapd versions 2.45.1ubuntu0.2, 2.45.1+18.04.2 and 2.45.1+20.04.2.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
- NVDNIST5.9MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.36% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Canonical2 products
- snapd≥ 2.45.1, < 2.45.1ubuntu0.2
- ubuntu_linuxEOL16.04 | 18.04 | 19.10 | 20.04
Debian1 product
- snapd< 2.45.2-1
Ubuntu1 product
- snapd< 2.45.1ubuntu0.2 | < 2.45.1+18.04.2 | < 2.45.1+20.04.2
3 vendors · 4 products
