Every CVESearch/Get API key

CVE-2016-10119

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

7.8 HighFix available

CVE-2016-10119 is a high vulnerability (CVSS 7.8) in Firejail Project Firejail, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 34th percentile. Fixed in firejail 0.9.38-1.

What does this mean?
Severity
7.8 HighCVSS 3.0, NVD
Exploit chance
0.39%EPSS, 34th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.9.38-1firejail +2 more

Description

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.39%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firejail
Debian:12
before 0.9.38-1
0.9.38-1
firejail
Debian:13
before 0.9.38-1
0.9.38-1
firejail
Debian:14
before 0.9.38-1
0.9.38-1

What each source reports

NVD Score used7.8

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
CVE-2016-10119
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
CVE-2016-10119
Updated
2026-11-02
EUVDEUVD-2016-1310No score

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
EUVD-2016-1310
Updated
2026-11-03
GitHub AdvisoriesGHSA-j7rw-j57q-hgf47.8

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
GHSA-j7rw-j57q-hgf4
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV7.8

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
CVE-2016-10119
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-101197.8

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
DEBIAN-CVE-2016-10119
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-101197.8

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.

Record
UBUNTU-CVE-2016-10119
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

History

History
RecordedChangedSources
facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open