CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12439

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.9%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 4.6

References

Products affected by CVE-2019-12439

Projectatomic » Bubblewrap » Version: N/A

cpe:2.3:a:projectatomic:bubblewrap:-
Projectatomic » Bubblewrap » Version: 0.1.0

cpe:2.3:a:projectatomic:bubblewrap:0.1.0
Projectatomic » Bubblewrap » Version: 0.1.1

cpe:2.3:a:projectatomic:bubblewrap:0.1.1
Projectatomic » Bubblewrap » Version: 0.1.2

cpe:2.3:a:projectatomic:bubblewrap:0.1.2
Projectatomic » Bubblewrap » Version: 0.1.3

cpe:2.3:a:projectatomic:bubblewrap:0.1.3
Projectatomic » Bubblewrap » Version: 0.1.4

cpe:2.3:a:projectatomic:bubblewrap:0.1.4
Projectatomic » Bubblewrap » Version: 0.1.5

cpe:2.3:a:projectatomic:bubblewrap:0.1.5
Projectatomic » Bubblewrap » Version: 0.1.6

cpe:2.3:a:projectatomic:bubblewrap:0.1.6
Projectatomic » Bubblewrap » Version: 0.1.7

cpe:2.3:a:projectatomic:bubblewrap:0.1.7
Projectatomic » Bubblewrap » Version: 0.1.8

cpe:2.3:a:projectatomic:bubblewrap:0.1.8
Projectatomic » Bubblewrap » Version: 0.2.0

cpe:2.3:a:projectatomic:bubblewrap:0.2.0
Projectatomic » Bubblewrap » Version: 0.2.1

cpe:2.3:a:projectatomic:bubblewrap:0.2.1
Projectatomic » Bubblewrap » Version: 0.3.0

cpe:2.3:a:projectatomic:bubblewrap:0.3.0
Projectatomic » Bubblewrap » Version: 0.3.1

cpe:2.3:a:projectatomic:bubblewrap:0.3.1
Projectatomic » Bubblewrap » Version: 0.3.2

cpe:2.3:a:projectatomic:bubblewrap:0.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12439

Products

Pricing

Contact Us