PT-2019-12828 · Netwrix+1 · Firejail+1
Skewedzeppelin
·
Publicado
2019-05-31
·
Atualizado
2020-08-24
·
CVE-2019-12499
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Firejail versions prior to 0.9.60
Description
The issue allows for the truncation of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated under specific conditions. These conditions include starting the jail with the exploit code inside as root and terminating it as root from the host, either by stopping it ungracefully or using the --shutdown control command.
Recommendations
For versions prior to 0.9.60, update to version 0.9.60 or later to resolve the issue. As a temporary workaround, consider restricting the use of the firejail sandbox to non-root users to minimize the risk of exploitation. Additionally, avoid using the --shutdown control command or ungracefully stopping the sandbox when running as root until the issue is resolved.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Firejail