Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case
    during its attempt to prevent accessing user files with an euid of zero, which allows local users to
    conduct sandbox-escape attacks via vectors involving a symlink and the --private option. (CVE-2017-5180)

  - Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to
    bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument. (CVE-2017-5206)

  - Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via
    the --shell argument. (CVE-2017-5207)

The remote host is affected by the vulnerability described in GLSA-201701-62 (Firejail: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firejail. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly bypass sandbox protection, cause a Denial of       Service condition, or escalate privileges.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
400938	Alpine: firejail: security update to 0.9.44.2-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
400938	Alpine: firejail: security update to 0.9.44.2-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
96748	GLSA-201701-62 : Firejail: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2017-5180

high

Tenable Plugins

critical

critical

critical