CVE-2016-10122

NameCVE-2016-10122
DescriptionFirejail does not properly clean environment variables, which allows local users to gain privileges.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
firejail (PTS)buster, buster (security)0.9.58.2-2+deb10u3fixed
bullseye, bullseye (security)0.9.64.4-2+deb11u1fixed
sid, trixie, bookworm0.9.72-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
firejailsource(unstable)0.9.44.2-1

Notes

https://www.openwall.com/lists/oss-security/2017/01/05/4
https://github.com/netblue30/firejail/commit/3b81e1f2c331644ced87d26a943b22eed6242b8f
https://github.com/netblue30/firejail/commit/72bc0e145c67da24e555d868086953148c52b5fc
In 0.9.44-bugfixes: https://github.com/netblue30/firejail/commit/e847207df28e181a8f590ade825b5f06d4fadf17 (0.9.44.2)
In 0.9.44-bugfixes: https://github.com/netblue30/firejail/commit/18f6e9dc9b304f7aca291c3edce5122562b1e36c (0.9.44.2)

Search for package or bug name: Reporting problems