334 matches found
CVE-2016-10120
Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...
CVE-2016-10117
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc...
CVE-2016-10118
Firejail exposes a local-privilege issue: in CVE-2016-10118, a local user can truncate /etc/resolv.conf by performing a chroot to /. The NVD entry confirms LOCAL access with LOW/LOW remote? to integrity and confidentiality impact as stated, with impact limited to integrity (PARTIAL) and no confid...
CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
CVE-2016-10120
CVE-2016-10120 affects Firejail. The issue is that mounting points (/dev, /dev/shm, /var/tmp, /var/lock) are created with 0777 permissions, enabling local users to gain privileges. Connected sources reiterate this description across multiple databases (NVD, OSV, UBUNTU CVE, Debian tracker, etc.)....
CVE-2016-10122
Summary of CVE-2016-10122 : The vulnerability affects the Firejail project, where the software does not properly clean environment variables. The underlying root cause is the incomplete sanitization of environment variables, enabling local users to gain privileges. The issue is described consiste...
CVE-2016-10123
CVE-2016-10123 concerns Firejail, where allowing --chroot while seccomp is not supported creates a local privilege escalation risk. The known impact is privilege gain by local users; the root cause is the absence of seccomp support enabling an unsafe chroot workflow. The connected sources confirm...
CVE-2016-10123
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges...
CVE-2016-10120
Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...
CVE-2016-10119
Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...
CVE-2016-10121
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges...
CVE-2016-10123
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges...
Firejail Local Elevation of Privilege Vulnerability
Firejail is a SUID program designed to reduce the risk of security violations by restricting the runtime environment of untrusted applications through the use of Linux namespaces and seccomp-bpf. Firejail suffers from a local elevation of privilege vulnerability. An attacker could exploit this...
Firejail Security Bypass Vulnerability
Firejail is a set of SUID programs written in C that reduces the risk of security vulnerabilities by restricting the operating environment of untrusted applications using Linux namespaces and seccomp-bpf, a sandboxing mechanism. A security bypass vulnerability exists in Firejail. An attacker coul...
DEBIAN-CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...
UBUNTU-CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...
CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...
Design/Logic Flaw
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument...
