Code injection

Firejail does not properly clean environment variables, which allows local users to gain privileges...

CVE-2016-10121

CVE-2016-10121 concerns Firejail. The publicly documented impact is that Firejail uses weak permissions for /dev/shm/firejail (and possibly other files), enabling local users to gain privileges. The connected records corroborate a local-privilege elevation scenario but do not provide concrete exp...

CVE-2016-10122

Firejail does not properly clean environment variables, which allows local users to gain privileges...

CVE-2016-10118

Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /...

CVE-2016-10119

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...

CVE-2016-10123

Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges...

CVE-2016-10117

Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc...

CVE-2016-10118

Firejail exposes a local-privilege issue: in CVE-2016-10118, a local user can truncate /etc/resolv.conf by performing a chroot to /. The NVD entry confirms LOCAL access with LOW/LOW remote? to integrity and confidentiality impact as stated, with impact limited to integrity (PARTIAL) and no confid...

CVE-2016-10120

CVE-2016-10120 affects Firejail. The issue is that mounting points (/dev, /dev/shm, /var/tmp, /var/lock) are created with 0777 permissions, enabling local users to gain privileges. Connected sources reiterate this description across multiple databases (NVD, OSV, UBUNTU CVE, Debian tracker, etc.)....

CVE-2016-10119

Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...

Juniper Networks Junos OS Buffer Overflow Vulnerability

Junos OS is prone to a buffer overflow vulnerability in the keyboard driver. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

Design/Logic Flaw

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

CVE-2016-4446

The allowexecstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function...

Xxe

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

CVE-2016-4446

The allowexecstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function...

CVE-2016-4445

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

CVE-2016-4446

CVE-2016-4446 affects the setroubleshoot ecosystem (the allow_execstack plugin) and enables local users to run arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to commands.getoutput. Evidence across sources (Red Hat/AXSA entries and EulerOS/OpenVAS/NAS...