CVE-2016-8659

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending…

published February 13, 2017

CVSS
—
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Published
2017-02-13T18:00Z
EPSS history
Timeline
  • 13 FEB 18:00Z
    Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending…
    cvelistv5