CVE-2016-10121: High severity Firejail Project Firejail vulnerability
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.38-1 - Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.72-2Fixed in 0.9.74-1Fixed in 0.9.80-2
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10121?
CVE-2016-10121 is considered a high severity vulnerability due to weak permissions that allow local users to gain elevated privileges.
How do I fix CVE-2016-10121?
To fix CVE-2016-10121, ensure that the permissions for /dev/shm/firejail are correctly set to restrict local user access.
Which versions of Firejail are affected by CVE-2016-10121?
CVE-2016-10121 affects various versions of Firejail prior to the security updates that addressed the weak permissions.
What type of vulnerability is CVE-2016-10121 classified as?
CVE-2016-10121 is classified as a local privilege escalation vulnerability affecting system security.
Who can exploit CVE-2016-10121?
Any local user on a vulnerable system can exploit CVE-2016-10121 to gain unauthorized privileges.