CVE-2016-10118: Low severity Firejail Project Firejail vulnerability
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.44.2-1 - Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.72-2Fixed in 0.9.74-1Fixed in 0.9.80-2
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10118?
CVE-2016-10118 is classified as a medium-severity vulnerability.
How do I fix CVE-2016-10118?
To address CVE-2016-10118, ensure that your Firejail installation is updated to the latest version that includes the fix.
What type of system is affected by CVE-2016-10118?
CVE-2016-10118 affects systems using Firejail, a SUID sandbox program.
What can attackers do using CVE-2016-10118?
Attackers can exploit CVE-2016-10118 to truncate the /etc/resolv.conf file, potentially redirecting DNS lookups.
Is CVE-2016-10118 a remote or local vulnerability?
CVE-2016-10118 is a local vulnerability that requires local access to the system to be exploited.