CVE-2016-10122: High severity Firejail Project Firejail vulnerability
Firejail does not properly clean environment variables, which allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.44.2-1 - Upgrade
Upgrade
debian/firejailto a version that resolves this vulnerability.Fixed in 0.9.72-2Fixed in 0.9.74-1Fixed in 0.9.80-2
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10122?
CVE-2016-10122 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2016-10122?
To fix CVE-2016-10122, it is advised to upgrade Firejail to the latest version where the environment variable sanitization issue is addressed.
Who is affected by CVE-2016-10122?
Local users of Firejail are affected by CVE-2016-10122, as it involves improper cleaning of environment variables.
What type of vulnerability is CVE-2016-10122?
CVE-2016-10122 is classified as a privilege escalation vulnerability.
When was CVE-2016-10122 disclosed?
CVE-2016-10122 was disclosed in January 2017.