CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority...
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
CVE-2017-5180- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-862
- Updated
- 2026-11-02
CVE List No score
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
CVE-2017-5180- Updated
- 2026-11-02
EUVDEUVD-2017-14289 No score
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
EUVD-2017-14289- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j8r6-v8qr-pf69
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority...
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
GHSA-j8r6-v8qr-pf69- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-862
- Updated
- 2026-11-02
OSV
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
CVE-2017-5180- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
DEBIAN-CVE-2017-5180- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
- Record
UBUNTU-CVE-2017-5180- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10759-1 No score
firejail-0.9.66-1.2 on GA media
These are all security issues fixed in the firejail-0.9.66-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10759-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firejailDebian:12 |
before 0.9.44.2-3 | 0.9.44.2-3 |
firejailDebian:13 |
before 0.9.44.2-3 | 0.9.44.2-3 |
firejailDebian:14 |
before 0.9.44.2-3 | 0.9.44.2-3 |
firejailUbuntu:16.04:LTS |
before 0.9.38-1ubuntu0.1, plus listed versions 0.9.28-10.9.32-10.9.34-10.9.36-10.9.38-1 |
0.9.38-1ubuntu0.1 |
firejailopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 0.9.66-1.2 | 0.9.66-1.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Firejail < 0.9.44.4 / < 0.9.38.8 LTS - Local Sandbox Escape | 2017-01-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5180 is a high vulnerability (CVSS 8.8) in Firejail Project Firejail, published February 9, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.74%, the 54th percentile. Fixed in firejail 0.9.44.2-3.
References
securityfocus.com/bid/95298
firejail.wordpress.com/download-2/release-notes
security.gentoo.org/glsa/201701-62
openwall.com/lists/oss-security/2017/01/04/2
nvd.nist.gov/vuln/detail/CVE-2017-5180
github.com/advisories/GHSA-j8r6-v8qr-pf69
Show 13 moreShow less
security-tracker.debian.org/tracker/CVE-2017-5180
ubuntu.com/security/CVE-2017-5180
openwall.com/lists/oss-security/2017/01/04/1
cve.org/CVERecord?id=CVE-2017-5180
suse.com/security/cve/CVE-2016-7545