{"id":"CVE-2017-5180","aliases":["DEBIAN-CVE-2017-5180","EUVD-2017-14289","GHSA-j8r6-v8qr-pf69","UBUNTU-CVE-2017-5180","openSUSE-SU-2024:10759-1"],"status":"published","title":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority...","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00742,"percentile":0.54939,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-862"],"published":"2017-02-09T18:00:00Z","modified":"2026-10-30T06:00:03Z","exploits":[{"source":"exploitdb","id":"EDB-43359","title":"Firejail \u003c 0.9.44.4 / \u003c 0.9.38.8 LTS - Local Sandbox Escape","type":"local","platform":"linux","date":"2017-01-04","url":"https://www.exploit-db.com/exploits/43359"}],"fixes":[{"ecosystem":"Debian:12","package":"firejail","fixed_in":["0.9.44.2-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firejail","fixed_in":["0.9.44.2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firejail","fixed_in":["0.9.44.2-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firejail","fixed_in":["0.9.38-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firejail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.44.2-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firejail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.44.2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firejail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.44.2-3"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firejail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.38-1ubuntu0.1"}]}],"versions":["0.9.28-1","0.9.32-1","0.9.34-1","0.9.36-1","0.9.38-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firejail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.66-1.2"}]}],"bundled":7}],"products":[{"vendor":"firejail_project","product":"firejail"}],"references":[{"url":"http://www.securityfocus.com/bid/95298","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://firejail.wordpress.com/download-2/release-notes/","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201701-62","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://openwall.com/lists/oss-security/2017/01/04/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5180"},{"url":"https://firejail.wordpress.com/download-2/release-notes"},{"url":"https://github.com/advisories/GHSA-j8r6-v8qr-pf69"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-5180","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5180","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/01/04/1","tags":["report"]},{"url":"https://github.com/netblue30/firejail/issues/1020","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/01/05/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5180","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17368","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-5180","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:00:00Z","modified":"2024-08-05T14:55:35.375Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-14289","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:00:00Z","modified":"2024-08-05T14:55:35Z","updated_at":"2026-11-03T02:39:16.415448Z"}],"ghsa":[{"id":"GHSA-j8r6-v8qr-pf69","title":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority...","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2022-05-13T01:46:08Z","modified":"2025-04-20T03:33:44Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:01:40.757238Z"}],"nvd":[{"id":"CVE-2017-5180","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:59:00.127Z","modified":"2026-06-17T01:20:06.51Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:03:42.372487Z"}],"osv":[{"id":"CVE-2017-5180","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:59:00.127Z","modified":"2026-10-24T10:30:41.876007683Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.029968Z"},{"id":"DEBIAN-CVE-2017-5180","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:59:00.127Z","modified":"2026-10-30T06:00:03.747940198Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-5180","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","status":"published","published":"2017-02-09T18:59:00Z","modified":"2025-09-08T16:44:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.388065Z"},{"id":"openSUSE-SU-2024:10759-1","title":"firejail-0.9.66-1.2 on GA media","description":"These are all security issues fixed in the firejail-0.9.66-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:24:27.505116Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}