Projectatomic Bubblewrap
3 CVEs affecting Projectatomic Bubblewrap. Latest disclosed: 2020-03-31. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5226 | Critical | 10.0 | 2017-03-29 | When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into th… |
CVE-2019-12439 | High | 7.4 | 2019-05-29 | bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR)… |
CVE-2020-5291 | High | 7.2 | 2020-03-31 | Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option ca… |