Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-5180
4.6
MEDIUMCVSS v2
Published
February 9, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
netblue30/firejail
GitHubLinux namespaces and seccomp-bpf sandbox
GitHubLinux namespaces and seccomp-bpf sandbox< 0.9.44.4, >= 0.9.38, < 0.9.38.8NVD