CVE-2016-9016 : Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of th

Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Published 2017-01-19 20:59:01

Updated 2017-06-08 17:39:40

Source MITRE

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2016-9016

Firejail Project » Firejail » Version: 0.9.38.4
cpe:2.3:a:firejail_project:firejail:0.9.38.4:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
8.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	2.0	6.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: nvd@nist.gov (Primary)

http://www.openwall.com/lists/oss-security/2016/10/25/9

oss-security - Re: CVE-2016-7545 -- SELinux sandbox escape - Firejail is CVE-2016-9016
Issue Tracking;Patch;Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/25/3

oss-security - Re: CVE-2016-7545 -- SELinux sandbox escape
Issue Tracking;Patch;Third Party Advisory
http://www.securityfocus.com/bid/93899

Firejail CVE-2016-9016 Remote Privilege Escalation Vulnerability
Third Party Advisory;VDB Entry

Jump to