CVE-2021-26910

Firejail is affected by CVE-2021-26910 due to a TOCTOU race between a stat operation and an OverlayFS mount, enabling a local attacker to bypass sandbox restrictions and potentially escalate privileges. Affected versions are prior to 0.9.64.4; remediation is upgrading to 0.9.64.4 or applying vend...

CVE-2019-12499

Technical details for CVE-2019-12499 are not provided in the supplied documents; information on affected products/versions, impact, and remediation is not available here. Monitor for updates from official advisories.

CVE-2019-12589

CVE-2019-12589 affects Firejail up to version 0.9.60, where seccomp filters can be written inside the jail. The underlying issue allows a process joined to the jail after a filter was modified by an attacker to bypass intended seccomp restrictions, enabling potential elevated access or impact par...

CVE-2017-5206

Firejail before 0.9.44.4 on Linux kernels before 4.8 permits bypassing the seccomp sandbox via the --allow-debuggers option, enabling context-dependent bypass of sandbox protections. Affected: Firejail prior to 0.9.44.4; impacted kernel

CVE-2017-5180

CVE-2017-5180 affects Firejail prior to 0.9.44.4 and 0.9.38.x LT S before 0.9.38.8 LTS. The issue is that the .Xauthority case is not considered when preventing access to user files for an euid 0 sandbox, enabling local sandbox-escape attacks via a symlink and the --private option. Reported impac...

CVE-2017-5207

CVE-2017-5207 affects Firejail before 0.9.44.4. Local users can gain root privileges via the --shell argument when running a bandwidth command. The provided connected documents confirm the vulnerability and its root-privilege impact, but do not include a vendor-wide fix/version in the supplied ma...