Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-12499HistoryMay 31, 2019 - 12:29 p.m.
CVE-2019-12499
2019-05-3112:29:00
Debian Security Bug Tracker
security-tracker.debian.org
12
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
72.5%
Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) needs to be started as root, and it also needs to be terminated as root from the host (either by stopping it ungracefully (e.g., SIGKILL), or by using the --shutdown control command). This is similar to CVE-2019-5736.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | firejail | < 0.9.58.2-2 | firejail_0.9.58.2-2_all.deb |
| Debian | 11 | all | firejail | < 0.9.58.2-2 | firejail_0.9.58.2-2_all.deb |
| Debian | 10 | all | firejail | < 0.9.58.2-2 | firejail_0.9.58.2-2_all.deb |
| Debian | 999 | all | firejail | < 0.9.58.2-2 | firejail_0.9.58.2-2_all.deb |
| Debian | 13 | all | firejail | < 0.9.58.2-2 | firejail_0.9.58.2-2_all.deb |
Related
ubuntucve
ubuntucve
osv
osv
CVE-2019-12499
2019-05-31 12:29:02
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
CVE-2019-5736
2019-02-11 19:29:00
prion
prion
Command injection
2019-05-31 12:29:00
Design/Logic Flaw
2019-02-11 19:29:00
Design/Logic Flaw
2020-07-13 21:15:00
cve
cve
veracode
veracode
Arbitrary Code Execution
2020-12-06 04:06:46
Malicious Container Execution
2019-02-12 02:31:29
Remote Code Execution
2020-06-24 03:08:12
nessus
nessus
Virtuozzo 7 : readykernel-patch (VZA-2019-008)
2020-02-04 00:00:00
Amazon Linux AMI : docker (ALAS-2019-1156)
2019-02-12 00:00:00
Rocky Linux 8 : container-tools:rhel8 (RLSA-2019:0975)
2023-11-07 00:00:00
photon
photon
ibm
ibm
githubexploit
githubexploit
Exploit for OS Command Injection in Docker
2019-12-12 16:57:13
Exploit for OS Command Injection in Docker
2021-07-08 22:46:30
Exploit for OS Command Injection in Docker
2019-06-30 13:42:14
threatpost
threatpost
Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure
2021-10-26 21:22:26
Major Container Security Flaw Threatens Cascading Attacks
2019-02-12 18:28:41
Rethinking Cyber-Defense Strategies in the Public-Cloud Age
2022-04-19 17:29:49
vmware
vmware
zdt
zdt
runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit
2019-02-12 00:00:00
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
2019-02-15 00:00:00
Docker Container Escape Exploit
2021-07-01 00:00:00
exploitpack
exploitpack
runc 1.0-rc6 (Docker 18.09.2) - Container Breakout (2)
2019-02-13 00:00:00
f5
f5
K46421255 : Docker privilege elevation vulnerability CVE-2019-5736
2019-03-01 00:00:00
virtuozzo
virtuozzo
openvas
openvas
Fedora Update for python3-lxc FEDORA-2019-c1dac1b3b8
2019-09-07 00:00:00
Docker < 18.09.2 runc Command Execution Vulnerability
2019-02-14 00:00:00
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2019-1061)
2020-01-23 00:00:00
amazon
amazon
Important: docker
2019-02-08 22:28:00
mageia
mageia
Updated opencontainers-runc packages fix security vulnerability
2019-02-13 14:08:25
Updated lxc packages fix security vulnerability
2019-02-17 03:31:02
Updated firejail packages fix security vulnerabilities
2020-03-06 19:13:58
redhat
redhat
(RHSA-2019:0408) Important: OpenShift Container Platform 3.4, 3.5, 3.6, and 3.7 security update
2019-02-26 09:31:21
(RHSA-2019:0303) Important: runc security update
2019-02-11 14:24:53
(RHSA-2019:0304) Important: docker security update
2019-02-11 14:26:20
oraclelinux
oraclelinux
runc bug fix update
2021-04-28 00:00:00
container-tools:rhel8 security and bug fix update
2019-07-30 00:00:00
docker-engine security update
2019-02-19 00:00:00
suse
suse
Security update for docker-runc (important)
2019-02-27 00:00:00
Security update for lxc (moderate)
2019-10-03 00:00:00
Security update for lxc (moderate)
2019-10-07 00:00:00
impervablog
impervablog
Hundreds of Vulnerable Docker Hosts Exploited by Cryptocurrency Miners
2019-03-04 21:00:39
fedora
fedora
[SECURITY] Fedora 29 Update: python3-lxc-3.0.4-1.fc29
2019-09-06 12:59:40
[SECURITY] Fedora 29 Update: moby-engine-18.06.0-2.ce.git0ffa825.fc29
2019-02-19 14:04:24
[SECURITY] Fedora 30 Update: lxcfs-3.0.4-1.fc30
2019-09-06 12:35:28
hackerone
hackerone
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
2019-02-13 18:50:11
50m-ctf: CTF write-up: c8889970d9fb722066f31e804e351993
2019-03-03 10:08:22
50m-ctf: $50 million CTF Writeup
2019-03-25 02:28:13
trendmicroblog
trendmicroblog
This Week in Security News: Instagram Hackers and Enterprise Threats
2019-03-01 14:57:50
Attacking Containers and runC
2019-02-12 19:22:35
redhatcve
redhatcve
CVE-2019-5736
2020-01-11 09:33:43
CVE-2020-14298
2020-06-23 19:26:46
qualysblog
qualysblog
RunC Container Breakout Vulnerability
2019-02-12 15:46:10
thn
thn
Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
2021-09-10 05:07:00
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
2019-02-12 08:59:00
archlinux
archlinux
[ASA-201902-6] runc: privilege escalation
2019-02-11 00:00:00
[ASA-201902-20] flatpak: privilege escalation
2019-02-17 00:00:00
alpinelinux
alpinelinux
CVE-2019-5736
2019-02-11 19:29:00
altlinux
altlinux
Security fix for the ALT Linux 8 package runc version 1.0.0-alt7.git0a012df
2019-02-20 00:00:00
Security fix for the ALT Linux 10 package runc version 1.0.0-alt7.git0a012df
2019-02-13 00:00:00
kitploit
kitploit
almalinux
almalinux
Important: container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cbl_mariner
cbl_mariner
CVE-2019-5736 affecting package moby-buildx 0.4.1-3
2021-07-08 21:56:42
checkpoint_advisories
checkpoint_advisories
runc Container Escape (CVE-2019-5736)
2019-02-14 00:00:00
debiancve
debiancve
CVE-2019-5736
2019-02-11 19:29:00
CVE-2020-14298
2020-07-13 21:15:00
rocky
rocky
container-tools:rhel8 security and bug fix update
2019-05-07 03:39:11
cisco
cisco
cloudfoundry
cloudfoundry
CVE-2019-5736: runC container breakout | Cloud Foundry
2019-02-13 00:00:00
metasploit
metasploit
Docker Container Escape Via runC Overwrite
2021-06-30 09:02:11
packetstorm
packetstorm
Docker Container Escape
2021-07-01 00:00:00
ubuntu
ubuntu
Docker vulnerabilities
2019-07-08 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-07-02 18:44:54
github
github
gentoo
gentoo
runC: Multiple vulnerabilities
2020-03-15 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
72.5%
Related for DEBIANCVE:CVE-2019-12499