CVE-2017-14178

—

CVSS 3.0

7.5 high

EPSS

2%p77

Published

Feb 2, 2018 (Feb 2, 2018)

Modified

Jun 17, 2026

Description

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.

Vendors: snapcraft
Products: snapd
Weakness: CWE-755
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.