vulnwire
8.8high

CVE-2017-5940

Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 30%
Public exploits
0
none known

Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-5180.

Exploit prediction (EPSS)

0.36% probability of exploitation in the next 30 days, higher than 30% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

  • github.com /netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863 · x_refsource_MISC, x_transferred
  • security.gentoo.org /glsa/201702-03 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • github.com /netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858f · x_refsource_MISC, x_transferred
  • firejail.wordpress.com /download-2/release-notes/ · x_refsource_MISC, x_transferred
  • openwall.com /lists/oss-security/2017/01/31/16 · x_refsource_MISC, x_transferred
  • github.com /netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592ef · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/96221 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.