CVE-2021-26910

Firejail is affected by CVE-2021-26910 due to a TOCTOU race between a stat operation and an OverlayFS mount, enabling a local attacker to bypass sandbox restrictions and potentially escalate privileges. Affected versions are prior to 0.9.64.4; remediation is upgrading to 0.9.64.4 or applying vend...

CVE-2020-17368

CVE-2020-17368 affects Firejail prior to 0.9.64. It arises when using --output or --output-stderr, where shell metacharacters are mishandled and the command line arguments are concatenated into a single string passed to a shell, enabling potential command injection. Public disclosures in Debian L...

CVE-2020-17367

Firejail vulnerable to command injection via CLI handling: CVE-2020-17367 occurs because the end-of-options indicator is not honored after --output, allowing manipulation of a sandboxed app’s command line; CVE-2020-17368 also exists, where output redirection via --output/--output-stderr concatena...

CVE-2019-12499

Technical details for CVE-2019-12499 are not provided in the supplied documents; information on affected products/versions, impact, and remediation is not available here. Monitor for updates from official advisories.

CVE-2022-31214

Firejail (version 0.9.68 affected) has a Privilege Context Switching flaw in join.c that lets a local user exploit a crafted join target to drop out of the initial user namespace and gain root privileges via setuid-root binaries. mitigations rely on upgrading to patched releases (e.g., Firejail 0...

CVE-2017-5206

Firejail before 0.9.44.4 on Linux kernels before 4.8 permits bypassing the seccomp sandbox via the --allow-debuggers option, enabling context-dependent bypass of sandbox protections. Affected: Firejail prior to 0.9.44.4; impacted kernel

CVE-2017-5940

Firejail is affected by CVE-2017-5940: versions prior to 0.9.44.6 and the 0.9.38.x LTS line prior to 0.9.38.10 LTS do not adequately address dotfile handling for an euid=0 scenario, enabling local sandbox-escape via a symlink with the --private option. This vulnerability stems from an incomplete ...

CVE-2019-12589

CVE-2019-12589 affects Firejail up to version 0.9.60, where seccomp filters can be written inside the jail. The underlying issue allows a process joined to the jail after a filter was modified by an attacker to bypass intended seccomp restrictions, enabling potential elevated access or impact par...

CVE-2017-5180

CVE-2017-5180 affects Firejail prior to 0.9.44.4 and 0.9.38.x LT S before 0.9.38.8 LTS. The issue is that the .Xauthority case is not considered when preventing access to user files for an euid 0 sandbox, enabling local sandbox-escape attacks via a symlink and the --private option. Reported impac...

CVE-2017-5207

CVE-2017-5207 affects Firejail before 0.9.44.4. Local users can gain root privileges via the --shell argument when running a bandwidth command. The provided connected documents confirm the vulnerability and its root-privilege impact, but do not include a vendor-wide fix/version in the supplied ma...

CVE-2016-10118

Firejail exposes a local-privilege issue: in CVE-2016-10118, a local user can truncate /etc/resolv.conf by performing a chroot to /. The NVD entry confirms LOCAL access with LOW/LOW remote? to integrity and confidentiality impact as stated, with impact limited to integrity (PARTIAL) and no confid...

CVE-2016-10117

The CVE-2016-10117 entry concerns Firejail failing to restrict access to the --tmpfs option, enabling local users to gain privileges (demonstrated by mounting over /etc). Affected software is Firejail; the vulnerability stems from insufficient enforcement of tmpfs restrictions, allowing local pri...

CVE-2016-10121

CVE-2016-10121 concerns Firejail. The publicly documented impact is that Firejail uses weak permissions for /dev/shm/firejail (and possibly other files), enabling local users to gain privileges. The connected records corroborate a local-privilege elevation scenario but do not provide concrete exp...

CVE-2016-10119

Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...

CVE-2016-9016

Firejail 0.9.38.4 is affected by a local privilege escalation vulnerability. A local user can execute arbitrary commands outside the sandbox by sending a crafted TIOCSTI ioctl, bypassing sandboxing protections. The flaw is described as a local-exploit involving TIOCSTI, enabling command execution...

CVE-2016-10123

CVE-2016-10123 concerns Firejail, where allowing --chroot while seccomp is not supported creates a local privilege escalation risk. The known impact is privilege gain by local users; the root cause is the absence of seccomp support enabling an unsafe chroot workflow. The connected sources confirm...

CVE-2016-10122

Summary of CVE-2016-10122 : The vulnerability affects the Firejail project, where the software does not properly clean environment variables. The underlying root cause is the incomplete sanitization of environment variables, enabling local users to gain privileges. The issue is described consiste...

CVE-2016-10120

CVE-2016-10120 affects Firejail. The issue is that mounting points (/dev, /dev/shm, /var/tmp, /var/lock) are created with 0777 permissions, enabling local users to gain privileges. Connected sources reiterate this description across multiple databases (NVD, OSV, UBUNTU CVE, Debian tracker, etc.)....