CVE-2016-9016 Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
HighCVSS 8.8
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firejail(Debian:12) | < 0.9.44-1 | 0.9.44-1 |
| debian/firejail(Debian:13) | < 0.9.44-1 | 0.9.44-1 |
| debian/firejail(Debian:14) | < 0.9.44-1 | 0.9.44-1 |
| firejail project firejail | = 0.9.38.4 | No fix listed |
References
- Debian Security Tracker CVE-2016-9016 vendor-advisory
- [oss-security] 20161025 Re: CVE-2016-7545 -- SELinux sandbox escape issue-tracking mailing-list patch third-party-advisory
- [oss-security] 20161025 Re: CVE-2016-7545 -- SELinux sandbox escape - Firejail is CVE-2016-9016 issue-tracking mailing-list patch third-party-advisory
- 93899 third-party-advisory vdb-entry