High severity · published Mar 23, 2017
CVE-2017-5207
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firejail · Firejail Project
before 0.9.44.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-5207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-5207
Mailing List
http://www.openwall.com/lists/oss-security/2017/01/07/6
Third Party Advisory
http://www.securityfocus.com/bid/97385
Release Notes
https://firejail.wordpress.com/download-2/release-notes/
Issue Tracking
https://github.com/netblue30/firejail/commit/5d43fdcd215203868d440ffc42036f5f5ffc89fc
Issue Tracking
https://github.com/netblue30/firejail/issues/1023
Patch
https://security.gentoo.org/glsa/201701-62
More from Firejail
9.8
CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection
9.0
CVE-2017-5206
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the…
8.8
CVE-2019-12589
In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter…
8.8
CVE-2017-5940
Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of…
8.8
CVE-2017-5180
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which…