Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q7w7-m7vg-xxg8

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

EPSS

Процентиль: 33%
0.00399
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7
ubuntu
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

CVSS3: 7
nvd
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.

CVSS3: 7
debian
больше 9 лет назад

Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might all ...

EPSS

Процентиль: 33%
0.00399
Низкий

7 High

CVSS3