Firejail Project Firejail vulnerabilities

• debian linux, firejail project firejail, fedoraproject fedora +2 more A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a... CVE-2022-31214 Fix available 7.8 HighJune 9, 2022
• firejail project firejail, debian linux +1 more Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is... CVE-2021-26910 Fix available 7.8 HighFebruary 8, 2021
• firejail project firejail, debian linux, fedoraproject fedora +1 more +3 more Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output... CVE-2020-17368 Fix available 9.8 CriticalAugust 6, 2020
• firejail project firejail, debian linux, fedoraproject fedora +1 more +3 more Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,... CVE-2020-17367 Fix available 7.8 HighAugust 6, 2020
• firejail project firejail In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of... CVE-2019-12589 Fix available 8.8 HighJune 3, 2019
• firejail project firejail Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the... CVE-2019-12499 Fix available 8.1 HighMay 31, 2019
• firejail project firejail Firejail allows --chroot when seccomp is not supported, which might allow local users to gain... CVE-2016-10123 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail does not properly clean environment variables, which allows local users to gain privileges. CVE-2016-10122 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local... CVE-2016-10121 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var... CVE-2016-10120 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. CVE-2016-10119 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. CVE-2016-10118 Fix available 3.3 LowApril 13, 2017
• firejail project firejail Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as... CVE-2016-10117 Fix available 7.8 HighApril 13, 2017
• firejail project firejail Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root... CVE-2017-5207 Fix available 7.8 HighMarch 23, 2017
• firejail project firejail Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent... CVE-2017-5206 Fix available 9.0 CriticalMarch 23, 2017
• firejail project firejail Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address... CVE-2017-5940 Fix available 8.8 HighFebruary 9, 2017
• firejail project firejail Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority... CVE-2017-5180 Public exploitFix available 8.8 HighFebruary 9, 2017
• firejail project firejail Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a... CVE-2016-9016 Fix available 8.8 HighJanuary 19, 2017