| Package | Affected versions | Patched versions |
|---|---|---|
| ubuntu-core-launcher | = 1.0.27 |
The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free