CVE-2016-10121: High severity netblue30 firejail vulnerability
Published Apr 13, 2017
·Updated
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
Affected Software
1 affected component
Firejail Project Firejail
Event History
Apr 13, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10121?
CVE-2016-10121 is considered a high severity vulnerability due to weak permissions that allow local users to gain elevated privileges.
2
How do I fix CVE-2016-10121?
To fix CVE-2016-10121, ensure that the permissions for /dev/shm/firejail are correctly set to restrict local user access.
3
Which versions of Firejail are affected by CVE-2016-10121?
CVE-2016-10121 affects various versions of Firejail prior to the security updates that addressed the weak permissions.
4
What type of vulnerability is CVE-2016-10121 classified as?
CVE-2016-10121 is classified as a local privilege escalation vulnerability affecting system security.
5
Who can exploit CVE-2016-10121?
Any local user on a vulnerable system can exploit CVE-2016-10121 to gain unauthorized privileges.