335 matches found
EUVD-2016-1310
Malware in sbrugna...
EUVD-2022-52798
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-26910
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an...
Linux Distros Unpatched Vulnerability : CVE-2019-12499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having th...
Linux Distros Unpatched Vulnerability : CVE-2020-17367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection. CVE-2020-17367 Note that...
Linux Distros Unpatched Vulnerability : CVE-2017-5206
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism v...
Linux Distros Unpatched Vulnerability : CVE-2016-10122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail does not properly clean environment variables, which allows local users to gain privileges. CVE-2016-10122 Note that Nessus relies on the presence of t...
Linux Distros Unpatched Vulnerability : CVE-2017-5207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. CVE-2017-5207 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2019-12589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the...
Linux Distros Unpatched Vulnerability : CVE-2020-17368
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection. CVE-2020-1736...
firejail
This repository is an open-source Linux sandboxing platform called Firejail. It is a Linux namespaces and seccomp-bpf sandbox that allows users to run applications in a secure environment, isolating them from the rest of the system. The repository contains a variety of tools and scripts for...
Fedora 38 : firejail (2022-674e299893)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-674e299893 advisory. Automatic update for firejail-0.9.70-1.fc38. Changelog Tue Sep 6 2022 Maxwell G - 0.9.70-1 - Update to 0.9.70 rhbz2042724. - Mitigates CVE-2022-3121...
CVE-2024-10007
GitHub Enterprise Server CVE-2024-10007 is a path collision and arbitrary code execution flaw enabling container escape to root via ghe-firejail. Exploitation requires Enterprise Administrator access. Affected: all versions before 3.15. Remediations are to upgrade to fixed versions: 3.14.3, 3.13....
GitHub Enterprise Server 后置链接漏洞
GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stem...
OPENSUSE-SU-2024:12136-1 firejail-0.9.68-3.1 on GA media
These are all security issues fixed in the firejail-0.9.68-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10759-1 firejail-0.9.66-1.2 on GA media
These are all security issues fixed in the firejail-0.9.66-1.2 package on the GA media of openSUSE Tumbleweed...
openSUSE: Security Advisory for firejail (openSUSE-SU-2022:10016-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2023-2289
software: firejail 0.9.60 WASP: ROSA-CHROME packageevrstring: firejail-0.9.60-1.src.rpm CVE-ID: CVE-2021-26910 BDU-ID: 2021-03745 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the OverlayFS SUID component of the Firejail sandbox is related to insufficient state checking of a shared resource...
GLSA-202305-19 : Firejail: Local Privilege Escalation
The remote host is affected by the vulnerability described in GLSA-202305-19 Firejail: Local Privilege Escalation - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a joi...
