CVE-2016-10118: Low severity netblue30 firejail vulnerability
Published Apr 13, 2017
·Updated
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.
Affected Software
1 affected component
Firejail Project Firejail
Event History
Apr 13, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10118?
CVE-2016-10118 is classified as a medium-severity vulnerability.
2
How do I fix CVE-2016-10118?
To address CVE-2016-10118, ensure that your Firejail installation is updated to the latest version that includes the fix.
3
What type of system is affected by CVE-2016-10118?
CVE-2016-10118 affects systems using Firejail, a SUID sandbox program.
4
What can attackers do using CVE-2016-10118?
Attackers can exploit CVE-2016-10118 to truncate the /etc/resolv.conf file, potentially redirecting DNS lookups.
5
Is CVE-2016-10118 a remote or local vulnerability?
CVE-2016-10118 is a local vulnerability that requires local access to the system to be exploited.