firejail vulnerabilities (Debian)
18 vulnerabilities.
-
firejailDebian A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a... 7.8 High -
firejailDebian Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is... 7.8 High -
firejailDebian Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output... 9.8 Critical -
firejailDebian Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,... 7.8 High -
firejailDebian In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of... 8.8 High -
firejailDebian Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the... 8.1 High -
firejailDebian Firejail allows --chroot when seccomp is not supported, which might allow local users to gain... 7.8 High -
firejailDebian Firejail does not properly clean environment variables, which allows local users to gain privileges. 7.8 High -
firejailDebian Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local... 7.8 High -
firejailDebian Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var... 7.8 High -
firejailDebian Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. 7.8 High -
firejailDebian Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. 3.3 Low -
firejailDebian Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as... 7.8 High -
firejailDebian Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root... 7.8 High -
firejailDebian Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent... 9.0 Critical -
firejailDebian Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address... 8.8 High -
firejailDebian Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority... 8.8 High -
firejailDebian Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a... 8.8 High