CVE-2016-10123
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain...
CVE-2016-10123 is a high vulnerability (CVSS 7.8) in Firejail Project Firejail, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in firejail 0.9.38-1.
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
CVE-2016-10123- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
CVE-2016-10123- Updated
- 2026-11-02
EUVDEUVD-2016-1314 No score
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
EUVD-2016-1314- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ff55-xjrc-r379
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain...
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
GHSA-ff55-xjrc-r379- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
CVE-2016-10123- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10123
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
DEBIAN-CVE-2016-10123- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10123
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
- Record
UBUNTU-CVE-2016-10123- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2017/01/05/4
nvd.nist.gov/vuln/detail/CVE-2016-10123
github.com/advisories/GHSA-ff55-xjrc-r379
security-tracker.debian.org/tracker/CVE-2016-10123
ubuntu.com/security/CVE-2016-10123
cve.org/CVERecord?id=CVE-2016-10123