Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2023/05/03 12:0 a.m.28 views

GLSA-202305-19 : Firejail: Local Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202305-19 Firejail: Local Privilege Escalation - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a joi...

7.8CVSS7.4AI score0.0007EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.3 views

The vulnerability of the join.c component in the isolated Firejail programming environment, which allows a hacker to escalate their privileges.

The vulnerability of the join.c component in the isolated Firejail programming environment is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

5.6CVSS7.1AI score0.0007EPSS
Exploits0References17Affected Software6
OSV
OSV
added 2022/06/09 4:15 p.m.13 views

CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.8CVSS6.8AI score
Exploits0References8
Veracode
Veracode
added 2021/03/18 10:34 p.m.41 views

Arbitrary Code Execution

Linux kernel is vulnerable to arbitrary code execution. Due to a flaw in mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel, it allows remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...

8.8CVSS7.5AI score0.00579EPSS
Exploits0References13Affected Software6
CNVD
CNVD
added 2021/01/06 12:0 a.m.4 views

Linux kernel arbitrary code execution vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An arbitrary code execution vulnerability exists in mwifiexcmd80211adhocstart in...

8.8CVSS7.9AI score0.00579EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/01/05 5:15 a.m.49 views

CVE-2020-36158

mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...

8.8CVSS7.2AI score0.00579EPSS
Exploits0References11
Rows per page
Query Builder