CVE-2016-10119: High severity Firejail Project Firejail Wordpress vulnerability
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.38-1 - Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.72-2Fixed in 0.9.74-1Fixed in 0.9.80-2
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10119?
CVE-2016-10119 is classified as a high-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2016-10119?
To fix CVE-2016-10119, users should set appropriate permissions for the /tmp directory instead of using 0777, such as 1777.
Who is affected by CVE-2016-10119?
CVE-2016-10119 affects users of the Firejail application who are utilizing the default mount permissions for the /tmp directory.
What type of vulnerability is CVE-2016-10119?
CVE-2016-10119 is a local privilege escalation vulnerability that allows unauthorized access to system resources.
Is there a workaround for CVE-2016-10119?
A temporary workaround for CVE-2016-10119 is to restrict the use of Firejail or modify the mount options for /tmp prior to usage.