CVE-2021-26910

Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an…

High · published February 8, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Published
2021-02-08T19:56Z
EPSS history
Timeline
  • 08 FEB 19:56Z
    Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an…
    cvelistv5