Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-8659
6.9
MEDIUMCVSS v2
Published
February 13, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
containers/bubblewrap
GitHubLow-level unprivileged sandboxing tool used by Flatpak and similar projects
GitHubLow-level unprivileged sandboxing tool used by Flatpak and similar projects<= 0.1.1NVD