FP
Vendor
Firejail Project
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-31214 | FI Firejail Firejail Project | 7.8 | Jun 9 | A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68 |
| CVE-2021-26910 | FI Firejail Firejail Project | 7.0 | Feb 8 | Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation |
| CVE-2020-17368 | FI Firejail Firejail Project | 9.8 | Aug 11 | Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection |
| CVE-2020-17367 | FI Firejail Firejail Project | 7.8 | Aug 11 | Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection |
| CVE-2019-12589 | FI Firejail Firejail Project | 8.8 | Jun 3 | In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter… |
| CVE-2019-12499 | FI Firejail Firejail Project | 8.1 | May 31 | Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox… |
| CVE-2016-10123 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges |
| CVE-2016-10122 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail does not properly clean environment variables, which allows local users to gain privileges |
| CVE-2016-10121 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges |
| CVE-2016-10120 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges |
| CVE-2016-10119 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges |
| CVE-2016-10118 | FI Firejail Firejail Project | 3.3 | Apr 13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to / |
| CVE-2016-10117 | FI Firejail Firejail Project | 7.8 | Apr 13 | Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc |
| CVE-2017-5207 | FI Firejail Firejail Project | 7.8 | Mar 23 | Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument |
| CVE-2017-5206 | FI Firejail Firejail Project | 9.0 | Mar 23 | Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the… |
| CVE-2017-5940 | FI Firejail Firejail Project | 8.8 | Feb 9 | Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of… |
| CVE-2017-5180 | FI Firejail Firejail Project | 8.8 | Feb 9 | Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which… |
| CVE-2016-9016 | FI Firejail Firejail Project | 8.8 | Jan 19 | Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call |