vulnerability

Ubuntu: USN-3887-1 (CVE-2019-7304): snapd vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Feb 12, 2019

Added

Feb 16, 2019

Modified

Mar 27, 2026

Description

Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1.

Solution

ubuntu-upgrade-snapd

References

CVE-2019-7304
https://attackerkb.com/topics/CVE-2019-7304
CWE-863
EUVD-EUVD-2019-16848
NVD-CVE-2019-7304
UBUNTU-USN-3887-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16848

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report