CVE-2021-26910

Published
View on NVD ↗
CVSS v3
7.8
HIGH
CVSS v2
6.9
MEDIUM
Affected
1
PROJECT

Description

Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.

Linux namespaces and seccomp-bpf sandbox
GitHubGitHub
7.44K