Описание
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.1.6-2 |
| esm-infra-legacy/trusty | DNE | |
| precise | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 0.1.2-2 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| xenial | DNE | |
| yakkety | released | 0.1.5-1~ubuntu16.10.0 |
Показывать по
EPSS
6.9 Medium
CVSS2
7 High
CVSS3
Связанные уязвимости
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might all ...
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
ALT-PU-2016-2018: package `bubblewrap` update to version 0.1.2-alt1
EPSS
6.9 Medium
CVSS2
7 High
CVSS3