Поиск уязвимостей
Количество 13
Количество 13
ALT-PU-2017-1009
ALT-PU-2017-1009: package `firejail` update to version 0.9.44.4-alt1
CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not ...
GHSA-j8r6-v8qr-pf69
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows loc ...
CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, a ...
GHSA-qmh7-jq46-82r2
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
GHSA-cj78-6w9j-286h
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2017-1009 ALT-PU-2017-1009: package `firejail` update to version 0.9.44.4-alt1 | CVSS3: 9 | почти 10 лет назад | |
 | CVE-2017-5180 Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. | CVSS3: 8.8 | 1% Низкий | почти 10 лет назад |
 | CVE-2017-5180 Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. | CVSS3: 8.8 | 1% Низкий | почти 10 лет назад |
| CVE-2017-5180 Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not ... | CVSS3: 8.8 | 1% Низкий | почти 10 лет назад |
| GHSA-j8r6-v8qr-pf69 Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| CVE-2017-5207 Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. | CVSS3: 7.8 | 0% Низкий | больше 9 лет назад |
| CVE-2017-5207 Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. | CVSS3: 7.8 | 0% Низкий | больше 9 лет назад |
| CVE-2017-5207 Firejail before 0.9.44.4, when running a bandwidth command, allows loc ... | CVSS3: 7.8 | 0% Низкий | больше 9 лет назад |
| CVE-2017-5206 Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument. | CVSS3: 9 | 2% Низкий | больше 9 лет назад |
| CVE-2017-5206 Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument. | CVSS3: 9 | 2% Низкий | больше 9 лет назад |
| CVE-2017-5206 Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, a ... | CVSS3: 9 | 2% Низкий | больше 9 лет назад |
| GHSA-qmh7-jq46-82r2 Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
| GHSA-cj78-6w9j-286h Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument. | CVSS3: 9 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу