Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q7w7-m7vg-xxg8

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

EPSS

Процентиль: 34%
0.00396
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7
ubuntu
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

CVSS3: 7
nvd
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

CVSS3: 7
debian
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might all ...

CVSS3: 7
altlinux
около 10 лет назад

ALT-PU-2016-2018: package `bubblewrap` update to version 0.1.2-alt1

EPSS

Процентиль: 34%
0.00396
Низкий

7 High

CVSS3