Firejail_project Firejail
18 CVEs affecting Firejail_project Firejail. Latest disclosed: 2022-06-09. Critical: 2, High: 15.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-17368 | Critical | 9.8 | 2020-08-11 | Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection. |
CVE-2017-5206 | Critical | 9.0 | 2017-03-23 | Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism… |
CVE-2019-12589 | High | 8.8 | 2019-06-03 | In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the… |
CVE-2017-5940 | High | 8.8 | 2017-02-09 | Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user file… |
CVE-2017-5180 | High | 8.8 | 2017-02-09 | Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an… |
CVE-2016-9016 | High | 8.8 | 2017-01-19 | Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. |
CVE-2019-12499 | High | 8.1 | 2019-05-31 | Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having… |
CVE-2022-31214 | High | 7.8 | 2022-06-09 | A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid… |
CVE-2021-26910 | High | 7.8 | 2021-02-08 | Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an Overl… |
CVE-2020-17367 | High | 7.8 | 2020-08-11 | Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection. |
CVE-2016-10123 | High | 7.8 | 2017-04-13 | Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges. |
CVE-2016-10122 | High | 7.8 | 2017-04-13 | Firejail does not properly clean environment variables, which allows local users to gain privileges. |
CVE-2016-10121 | High | 7.8 | 2017-04-13 | Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. |
CVE-2016-10120 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges. |
CVE-2016-10119 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. |
CVE-2016-10117 | High | 7.8 | 2017-04-13 | Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc. |
CVE-2017-5207 | High | 7.8 | 2017-03-23 | Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. |
CVE-2016-10118 | Low | 3.3 | 2017-04-13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. |