CVE-2016-10117: High severity netblue30 firejail vulnerability
Published Apr 13, 2017
·Updated
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc.
Affected Software
1 affected component
Firejail Project Firejail
Event History
Apr 13, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10117?
CVE-2016-10117 has a medium severity level, indicating potential privilege escalation risks.
2
How do I fix CVE-2016-10117?
To fix CVE-2016-10117, it is recommended to update Firejail to the latest version that restricts access to --tmpfs.
3
Who is affected by CVE-2016-10117?
Local users on systems using affected versions of Firejail are at risk from CVE-2016-10117.
4
What kind of attack does CVE-2016-10117 vulnerability allow?
CVE-2016-10117 allows local users to gain elevated privileges by improperly mounting over critical directories, like /etc.
5
Is there a workaround for CVE-2016-10117?
A possible workaround for CVE-2016-10117 is to restrict user access to certain mount privileges in Firejail's configuration.