CVE-2020-11933

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-119345.9It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL(CVE-2020-119355.5It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vul CVE-2020-119363.1gdbus setgid privilege escalation CVE-2020-119375.5In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by re CVE-2020-119384.9In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The CVE-2020-119399.8In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overfl CVE-2020-11945.5A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Ser CVE-2020-119407.5In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can CVE-2020-119418.8An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery.CVE-2020-119429.8An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections.CVE-2020-119438.8An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.CVE-2020-119446.1Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled d