CVE search · CVE-2017-5226
CVE-2017-5226
critical 10.0
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-20
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.0 | critical 10.0 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
nvd@nist.govPrimary |
| CVSS 2.0 | high 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- projectatomic · bubblewrap
References
- http://www.openwall.com/lists/oss-security/2020/07/10/1
- http://www.openwall.com/lists/oss-security/2023/03/17/1
- http://www.securityfocus.com/bid/97260Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1411811Issue TrackingPatch
- https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117Patch
- https://github.com/projectatomic/bubblewrap/issues/142ExploitPatchVendor Advisory
- https://www.openwall.com/lists/oss-security/2023/03/14/2
- http://www.openwall.com/lists/oss-security/2020/07/10/1
- http://www.openwall.com/lists/oss-security/2023/03/17/1
- http://www.securityfocus.com/bid/97260Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1411811Issue TrackingPatch
- https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117Patch
- https://github.com/projectatomic/bubblewrap/issues/142ExploitPatchVendor Advisory
- https://www.openwall.com/lists/oss-security/2023/03/14/2