Описание
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
Ссылки
- Mailing ListPatchThird Party Advisory
- Third Party AdvisoryVDB Entry
- Release NotesVendor Advisory
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- PatchThird Party AdvisoryVDB Entry
- Mailing ListPatchThird Party Advisory
- Third Party AdvisoryVDB Entry
- Release NotesVendor Advisory
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- PatchThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 0.9.44.4 (исключая)
cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00404
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 7.8
ubuntu
больше 9 лет назад
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
CVSS3: 7.8
debian
больше 9 лет назад
Firejail before 0.9.44.4, when running a bandwidth command, allows loc ...
CVSS3: 7.8
github
больше 4 лет назад
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
CVSS3: 9
altlinux
почти 10 лет назад
ALT-PU-2017-1009: package `firejail` update to version 0.9.44.4-alt1
EPSS
Процентиль: 35%
0.00404
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-269