PT-2019-12878 · Firejail+1 · Firejail+1

Austin Morton · Publicado 2019-06-03 · Atualizado 2024-06-15 · CVE-2019-12589

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firejail versions prior to 0.9.60

Description The issue arises from seccomp filters being writable inside the jail, which leads to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker.

Recommendations For versions prior to 0.9.60, update to version 0.9.60 or later to resolve the issue.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

ALT-PU-2020-1670

ALT-PU-2020-2653

CVE-2019-12589

MGASA-2020-0115

OPENSUSE-SU-2024:10759-1

Produtos afetados

Alt Linux

Firejail

Referências · 24

• 🔥 https://github.com/netblue30/firejail/issues/2718 · Exploit
• https://github.com/netblue30/firejail/releases/tag/0.9.60 · Nota
• https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134 · Correção
• https://suse.com/security/cve/CVE-2017-5180 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/RGVULJ6IKVDO6UAVIQRHQVSKOUD6QDWM · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDY7B73YDRBURA25APSHD5PFEO4TNSFW · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12589 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2020-0115 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-17368 · Nota
• https://advisories.mageia.org/MGASA-2020-0115.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-5206 · Nota
• https://suse.com/security/cve/CVE-2020-17367 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-12589 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10759-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-5207 · Nota