İçeriğe atla
Noroxi

firejail project kayıtları

firejail project üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2020-17368
    40Planlayın

    Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command inje

    KritikCVSS 9,8İstismar yokEPSS %4

    firejail project · firejail11 Ağu 2020

  • CVE-2017-5206
    37İzleyin

    Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox pr

    KritikCVSS 9,0İstismar yokEPSS %1

    linux · linux kernel23 Mar 2017

  • CVE-2017-5180
    35İzleyin

    Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    firejail project · firejail9 Şub 2017

  • CVE-2019-12589
    35İzleyin

    In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process th

    YüksekCVSS 8,8İstismar yokEPSS %0

    firejail project · firejail2 Haz 2019

  • CVE-2017-5940
    35İzleyin

    Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent

    YüksekCVSS 8,8İstismar yokEPSS %0

    firejail project · firejail9 Şub 2017

  • CVE-2016-9016
    35İzleyin

    Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

    YüksekCVSS 8,8İstismar yokEPSS %0

    firejail project · firejail19 Oca 2017

  • CVE-2019-12499
    33İzleyin

    Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail

    YüksekCVSS 8,1İstismar yokEPSS %2

    firejail project · firejail31 May 2019

  • CVE-2020-17367
    31İzleyin

    Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.

    YüksekCVSS 7,8İstismar yokEPSS %1

    firejail project · firejail11 Ağu 2020

  • CVE-2022-31214
    31İzleyin

    A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail9 Haz 2022

  • CVE-2017-5207
    31İzleyin

    Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail23 Mar 2017

  • CVE-2016-10122
    31İzleyin

    Firejail does not properly clean environment variables, which allows local users to gain privileges.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2016-10121
    31İzleyin

    Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2016-10120
    31İzleyin

    Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privil

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2016-10119
    31İzleyin

    Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2016-10117
    31İzleyin

    Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2016-10123
    31İzleyin

    Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.

    YüksekCVSS 7,8İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017

  • CVE-2021-26910
    28İzleyin

    Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat ope

    YüksekCVSS 7,0İstismar yokEPSS %0

    firejail project · firejail8 Şub 2021

  • CVE-2016-10118
    13İzleyin

    Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.

    DüşükCVSS 3,3İstismar yokEPSS %0

    firejail project · firejail13 Nis 2017