CVE-2019-12589: High severity netblue30 firejail vulnerability
Published Jun 3, 2019
·Updated
In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker.
Affected Software
1 affected component
Firejail Project Firejail<0.9.60
Remediation
Patch Available
Event History
Jun 3, 2019
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is CVE-2019-12589?
CVE-2019-12589 is a vulnerability in Firejail before version 0.9.60 that allows an attacker to modify seccomp filters and bypass intended restrictions.
2
How does CVE-2019-12589 impact Firejail?
CVE-2019-12589 impacts Firejail by allowing an attacker to modify seccomp filters, which can lead to a lack of intended restrictions for processes in the jail.
3
What is the severity of CVE-2019-12589?
CVE-2019-12589 has a severity rating of 8.8 (high).
4
Which version of Firejail is affected by CVE-2019-12589?
Firejail versions prior to 0.9.60 are affected by CVE-2019-12589.
5
How can I fix CVE-2019-12589?
To fix CVE-2019-12589, upgrade to Firejail version 0.9.60 or later.