CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root...
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
CVE-2017-5207- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
CVE-2017-5207- Updated
- 2026-11-02
EUVDEUVD-2017-14313 No score
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
EUVD-2017-14313- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qmh7-jq46-82r2
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root...
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
GHSA-qmh7-jq46-82r2- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
OSV
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
CVE-2017-5207- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
DEBIAN-CVE-2017-5207- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
- Record
UBUNTU-CVE-2017-5207- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10759-1 No score
firejail-0.9.66-1.2 on GA media
These are all security issues fixed in the firejail-0.9.66-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10759-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firejailDebian:12 |
before 0.9.44.4-1 | 0.9.44.4-1 |
firejailDebian:13 |
before 0.9.44.4-1 | 0.9.44.4-1 |
firejailDebian:14 |
before 0.9.44.4-1 | 0.9.44.4-1 |
firejailUbuntu:16.04:LTS |
All versions, plus listed versions 0.9.28-10.9.32-10.9.34-10.9.36-10.9.38-10.9.38-1ubuntu0.10.9.38.10-0ubuntu0.16.04.1 |
None known |
firejailopenSUSE:Tumbleweed |
before 0.9.66-1.2 | 0.9.66-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5207 is a high vulnerability (CVSS 7.8) in Firejail Project Firejail, published March 23, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in firejail 0.9.44.4-1.
References
securityfocus.com/bid/97385
security.gentoo.org/glsa/201701-62
github.com/netblue30/firejail/commit/5d43fdcd215203868d440ffc42036f5f5ffc89fc
firejail.wordpress.com/download-2/release-notes
openwall.com/lists/oss-security/2017/01/07/6
Show 13 moreShow less
nvd.nist.gov/vuln/detail/CVE-2017-5207
security-tracker.debian.org/tracker/CVE-2017-5207
ubuntu.com/security/CVE-2017-5207
cve.org/CVERecord?id=CVE-2017-5207
suse.com/security/cve/CVE-2016-7545