CVE-2016-10122: High severity netblue30 firejail vulnerability
Published Apr 13, 2017
·Updated
Firejail does not properly clean environment variables, which allows local users to gain privileges.
Affected Software
1 affected component
Firejail Project Firejail
Event History
Apr 13, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10122?
CVE-2016-10122 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
2
How do I fix CVE-2016-10122?
To fix CVE-2016-10122, it is advised to upgrade Firejail to the latest version where the environment variable sanitization issue is addressed.
3
Who is affected by CVE-2016-10122?
Local users of Firejail are affected by CVE-2016-10122, as it involves improper cleaning of environment variables.
4
What type of vulnerability is CVE-2016-10122?
CVE-2016-10122 is classified as a privilege escalation vulnerability.
5
When was CVE-2016-10122 disclosed?
CVE-2016-10122 was disclosed in January 2017.