BU
Product
Bubblewrap
3
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Bubblewrap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5226 | 10.0 | Mar 29 | When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input… Affected: through 0.1.5 |
| CVE-2020-5291 | 7.8 | Mar 31 | Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make… Affected: before 0.4.1 |
| CVE-2019-12439 | 7.8 | May 29 | bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point Affected: before 0.3.3 |
Showing 3