CVE-2017-5206: Critical severity Firejail Project Firejail vulnerability
Published Mar 23, 2017
·Updated
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
Affected Software
4 affected components
Firejail Project Firejail<0.9.44.4
Linux Linux kernel<4.8
All of the following
Firejail Project Firejail<0.9.44.4
Linux Linux kernel<4.8
Remediation
Patch Available
Patch Available
Event History
Mar 23, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5206?
CVE-2017-5206 has a moderate severity rating due to its potential for sandbox protection bypass.
2
How do I fix CVE-2017-5206?
To fix CVE-2017-5206, upgrade Firejail to version 0.9.44.4 or later.
3
Who is affected by CVE-2017-5206?
CVE-2017-5206 affects users running Firejail versions prior to 0.9.44.4 on Linux kernels older than 4.8.
4
What attack vector is exploited in CVE-2017-5206?
CVE-2017-5206 is exploited through the use of the --allow-debuggers argument in Firejail.
5
Is there a workaround for CVE-2017-5206?
A potential workaround for CVE-2017-5206 is avoiding the use of the --allow-debuggers argument until an upgrade is performed.