Arbitrary Code Execution

bubblewrap is vulnerable to arbitrary code execution. A misuse of temporary directories in /tmp as a mount point allows a local attacker to exploit the vulnerability to execute arbitrary code or prevent other users from executing bubblewrap...

EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

bubblewrap: temporary directory misuse as mount point

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...

openSUSE Security Update : bubblewrap (openSUSE-2019-1721)

This update for bubblewrap fixes the following issues : Security issue fixed : - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE: Security Advisory for bubblewrap (openSUSE-SU-2019:1721-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1721-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project...

Security update for bubblewrap (important)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1721-1 Rating: important References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

SUSE SLED15 / SLES15 Security Update : bubblewrap (SUSE-SU-2019:1826-1)

This update for bubblewrap fixes the following issues : Security issue fixed : CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2019:1826-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958...

Photon OS 3.0: Bubblewrap PHSA-2019-3.0-0019

An update of the bubblewrap package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0019. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126191;...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0163

An update of 'falco', 'bubblewrap' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-3.0-0019

Updates of 'bubblewrap', 'docker', 'go' packages of Photon OS have been released...

openSUSE Security Update : bubblewrap (openSUSE-2019-1535)

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed : - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap. C Tenable Network Security, Inc. The descriptive text an...

OPENSUSE-SU-2019:1535-1 Security update for bubblewrap

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed: - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap...

Important Photon OS Security Update - PHSA-2019-0019

Updates of 'bubblewrap', 'docker', 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0163

Updates of 'bubblewrap', 'falco' packages of Photon OS have been released...

Security update for bubblewrap (moderate)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1535-1 Rating: moderate References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code. Mitigation The default...

Code injection

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...

CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...