PT-2017-16401 · Unknown+1 · Bubblewrap+1

Hanno Böck · Published 2017-01-29 · Updated 2024-06-15 · CVE-2017-5226

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions bubblewrap (affected versions not specified)

Description The issue allows a nonpriv session to escape the bubblewrap sandbox by utilizing the TIOCSTI ioctl to push characters into the terminal's input buffer. This enables an attacker to bypass the sandbox restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-1099

ALT-PU-2017-2110

CVE-2017-5226

OPENSUSE-SU-2024:10663-1

OPENSUSE-SU-2024:10762-1

OPENSUSE-SU-2024:12835-1

Affected Products

Alt Linux

Bubblewrap

References · 26

• 🔥 https://github.com/projectatomic/bubblewrap/issues/142 · Exploit
• https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117 · Patch
• https://errata.altlinux.org/ALT-PU-2017-2110 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5226 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-5226 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10762-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5226 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-1099 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10663-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5226 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1411811 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-5226 · Security Note
• http://securityfocus.com/bid/97260 · Note
• http://openwall.com/lists/oss-security/2023/03/17/1 · Note
• https://openwall.com/lists/oss-security/2023/03/14/2 · Note