firejail project firejail - vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Firejail prior to 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) n...

Firejail Project Firejail

4.6

CVSSv2

In Firejail prior to 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker.

Firejail Project Firejail

7.2

CVSSv2

Firejail prior to 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.

Firejail Project Firejail

4.6

CVSSv2

Firejail prior to 0.9.44.4 and 0.9.38.x LTS prior to 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --p...

Firejail Project Firejail

1 EDB exploit

7.2

CVSSv2

Firejail does not properly clean environment variables, which allows local users to gain privileges.

Firejail Project Firejail -

7.2

CVSSv2

Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.

Firejail Project Firejail -

4.6

CVSSv2

Firejail prior to 0.9.44.6 and 0.9.38.x LTS prior to 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink an...

Firejail Project Firejail

7.2

CVSSv2

Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc.

Firejail Project Firejail -

2.1

CVSSv2

Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.

Firejail Project Firejail -

7.2

CVSSv2

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Firejail Project Firejail -

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook