CVE-2016-8659

CVE-2016-8659 affects Bubblewrap versions prior to 0.1.3. The underlying issue is that the process sets the PR_SET_DUMPABLE flag, which may allow local users to gain privileges by attaching to the PrivSep socket. The connected documents confirm the vulnerable component and the root cause, and des...

CVE-2016-8659

Bubblewrap before 0.1.3 sets the PRSETDUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket...

CVE-2016-8659

Bubblewrap before 0.1.3 sets the PRSETDUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket...

CVE-2016-8659: Undefined Security Weakness

Bubblewrap before 0.1.3 sets the PRSETDUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket...

PT-2017-16401

Name of the Vulnerable Software and Affected Versions bubblewrap affected versions not specified Description The issue allows a nonpriv session to escape the bubblewrap sandbox by utilizing the TIOCSTI ioctl to push characters into the terminal's input buffer. This enables an attacker to bypass t...

Alpha Version of Sandboxed Tor Browser Released

A sandboxed version of the Tor Browser was released over the weekend, and while there are still some rough edges and bugs – potentially major, according to the developer– it could be the first step toward protecting Tor users from recent de-anonymization exploits. Yawning Angel, a longtime Tor...

Project Atomic bubblewrap Local Elevation of Privilege Vulnerability

Project Atomic is a suite of software sponsored by Red Hat that supports the creation and running of applications using Linux and Docker containers. A local elevation of privilege vulnerability exists in Project Atomic bubblewrap version 0.1.2-1, which can be exploited by an attacker to gain...

PT-2017-9717

Name of the Vulnerable Software and Affected Versions Bubblewrap versions prior to 0.1.3 Description The issue allows local users to potentially gain privileges by attaching to the process. This can be demonstrated by sending commands to a PrivSep socket. Recommendations For versions prior to...