CVE-2017-5180

NameCVE-2017-5180
DescriptionFirejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium
Debian Bugs850160

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
firejail (PTS)stretch0.9.44.8-2fixed
stretch (security)0.9.44.8-2+deb9u2fixed
buster, buster (security)0.9.58.2-2+deb10u2fixed
bullseye0.9.64.4-2fixed
bookworm, sid0.9.66-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
firejailsource(unstable)0.9.44.2-3850160

Notes

https://www.openwall.com/lists/oss-security/2017/01/04/1
https://github.com/netblue30/firejail/issues/1020

Search for package or bug name: Reporting problems