CVE-2016-10121
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local...
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
CVE-2016-10121- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
CVE-2016-10121- Updated
- 2026-11-02
EUVDEUVD-2016-1312 No score
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
EUVD-2016-1312- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-28rw-pgjg-j2jg
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local...
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
GHSA-28rw-pgjg-j2jg- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
CVE-2016-10121- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10121
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
DEBIAN-CVE-2016-10121- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10121
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
- Record
UBUNTU-CVE-2016-10121- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10121 is a high vulnerability (CVSS 7.8) in Firejail Project Firejail, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in firejail 0.9.38-1.
References
openwall.com/lists/oss-security/2017/01/05/4
nvd.nist.gov/vuln/detail/CVE-2016-10121
github.com/advisories/GHSA-28rw-pgjg-j2jg
security-tracker.debian.org/tracker/CVE-2016-10121
ubuntu.com/security/CVE-2016-10121
cve.org/CVERecord?id=CVE-2016-10121