CVE-2017-7794
First published: Tue Aug 08 2017(Updated: )
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <55.0 | |
| Linux Kernel | ||
| Firefox | <55 | 55 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-7798
- CVE-2017-7800
- CVE-2017-7801
- CVE-2017-7809
- CVE-2017-7784
- CVE-2017-7802
- CVE-2017-7785
- CVE-2017-7786
- CVE-2017-7806
- CVE-2017-7753
- CVE-2017-7787
- CVE-2017-7807
- CVE-2017-7792
- CVE-2017-7804
- CVE-2017-7791
- CVE-2017-7808
- CVE-2017-7782
- CVE-2017-7781
- CVE-2017-7794
- CVE-2017-7803
- CVE-2017-7799
- CVE-2017-7783
- CVE-2017-7788
- CVE-2017-7789
- CVE-2017-7790
- CVE-2017-7796
- CVE-2017-7797
- CVE-2017-7780
- CVE-2017-7779
Frequently Asked Questions
What is the severity of CVE-2017-7794?
CVE-2017-7794 is classified as a moderate severity vulnerability affecting Firefox on Linux systems.
How do I fix CVE-2017-7794?
To fix CVE-2017-7794, update Mozilla Firefox to version 56 or later.
What systems are affected by CVE-2017-7794?
CVE-2017-7794 affects only Linux operating systems running Firefox version 55 or earlier.
What are the consequences of CVE-2017-7794?
Exploitation of CVE-2017-7794 can allow a compromised content process to truncate files despite restricted access.
Is CVE-2017-7794 limited to specific versions of Firefox?
Yes, CVE-2017-7794 affects Firefox versions up to and including 55.
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mozilla-advisory
- source/Mozilla
- agent/software-canonical-lookup
- vendor/mozilla
- canonical/firefox
- vendor/linux
- canonical/linux kernel