CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-5180

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 4.6

References

Products affected by CVE-2017-5180

Firejail Project » Firejail » Version: 0.9

cpe:2.3:a:firejail_project:firejail:0.9
Firejail Project » Firejail » Version: 0.9.10

cpe:2.3:a:firejail_project:firejail:0.9.10
Firejail Project » Firejail » Version: 0.9.12

cpe:2.3:a:firejail_project:firejail:0.9.12
Firejail Project » Firejail » Version: 0.9.12.1

cpe:2.3:a:firejail_project:firejail:0.9.12.1
Firejail Project » Firejail » Version: 0.9.12.2

cpe:2.3:a:firejail_project:firejail:0.9.12.2
Firejail Project » Firejail » Version: 0.9.14

cpe:2.3:a:firejail_project:firejail:0.9.14
Firejail Project » Firejail » Version: 0.9.16

cpe:2.3:a:firejail_project:firejail:0.9.16
Firejail Project » Firejail » Version: 0.9.2

cpe:2.3:a:firejail_project:firejail:0.9.2
Firejail Project » Firejail » Version: 0.9.20

cpe:2.3:a:firejail_project:firejail:0.9.20
Firejail Project » Firejail » Version: 0.9.22

cpe:2.3:a:firejail_project:firejail:0.9.22
Firejail Project » Firejail » Version: 0.9.24

cpe:2.3:a:firejail_project:firejail:0.9.24
Firejail Project » Firejail » Version: 0.9.26

cpe:2.3:a:firejail_project:firejail:0.9.26
Firejail Project » Firejail » Version: 0.9.28

cpe:2.3:a:firejail_project:firejail:0.9.28
Firejail Project » Firejail » Version: 0.9.30

cpe:2.3:a:firejail_project:firejail:0.9.30
Firejail Project » Firejail » Version: 0.9.32

cpe:2.3:a:firejail_project:firejail:0.9.32
Firejail Project » Firejail » Version: 0.9.34

cpe:2.3:a:firejail_project:firejail:0.9.34
Firejail Project » Firejail » Version: 0.9.36

cpe:2.3:a:firejail_project:firejail:0.9.36
Firejail Project » Firejail » Version: 0.9.38

cpe:2.3:a:firejail_project:firejail:0.9.38
Firejail Project » Firejail » Version: 0.9.38.10

cpe:2.3:a:firejail_project:firejail:0.9.38.10
Firejail Project » Firejail » Version: 0.9.38.12

cpe:2.3:a:firejail_project:firejail:0.9.38.12
Firejail Project » Firejail » Version: 0.9.38.2

cpe:2.3:a:firejail_project:firejail:0.9.38.2
Firejail Project » Firejail » Version: 0.9.38.4

cpe:2.3:a:firejail_project:firejail:0.9.38.4
Firejail Project » Firejail » Version: 0.9.38.6

cpe:2.3:a:firejail_project:firejail:0.9.38.6
Firejail Project » Firejail » Version: 0.9.38.8

cpe:2.3:a:firejail_project:firejail:0.9.38.8
Firejail Project » Firejail » Version: 0.9.4

cpe:2.3:a:firejail_project:firejail:0.9.4
Firejail Project » Firejail » Version: 0.9.40

cpe:2.3:a:firejail_project:firejail:0.9.40
Firejail Project » Firejail » Version: 0.9.42

cpe:2.3:a:firejail_project:firejail:0.9.42
Firejail Project » Firejail » Version: 0.9.44

cpe:2.3:a:firejail_project:firejail:0.9.44
Firejail Project » Firejail » Version: 0.9.44.2

cpe:2.3:a:firejail_project:firejail:0.9.44.2
Firejail Project » Firejail » Version: 0.9.6

cpe:2.3:a:firejail_project:firejail:0.9.6
Firejail Project » Firejail » Version: 0.9.8

cpe:2.3:a:firejail_project:firejail:0.9.8
Firejail Project » Firejail » Version: 0.9.8.1

cpe:2.3:a:firejail_project:firejail:0.9.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-5180

Products

Pricing

Contact Us