CVE-2017-5180

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an…

published February 9, 2017

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00742 · 53.9th percentile
Published
2017-02-09T18:00Z
EPSS history
Timeline
  • 09 FEB 18:00Z
    Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an…
    cvelistv5