CVE-2017-5180: Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an…

PriorityP341high8.8CVSS 3.0

AVLACLPRLUINSCCHIHAH

EXPLOIT

EPSS

0.74%

50.0th percentile

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	firejail	< firejail 0.9.44.2-3 (bookworm)	firejail 0.9.44.2-3 (bookworm)
debian	firejail	< firejail 0.9.44.6-1 (bookworm)	firejail 0.9.44.6-1 (bookworm)
firejail_project	firejail	< 0.9.44.4	0.9.44.4
firejail_project	firejail	>= 0 < 0.9.44.6-1	0.9.44.6-1
firejail_project	firejail	>= 0 < 0.9.44.2-3	0.9.44.2-3
firejail_project	firejail	>= 0 < 0.9.44.6-1	0.9.44.6-1
firejail_project	firejail	>= 0 < 0.9.44.2-3	0.9.44.2-3
firejail_project	firejail	>= 0 < 0.9.44.6-1	0.9.44.6-1
firejail_project	firejail	>= 0 < 0.9.44.2-3	0.9.44.2-3
firejail_project	firejail	>= 0 < 0.9.44.6-1	0.9.44.6-1
firejail_project	firejail	>= 0 < 0.9.44.2-3	0.9.44.2-3
firejail_project	firejail	>= 0.9.38 < 0.9.38.8	0.9.38.8
firejail_project	firejail	0.9.38 – 0.9.38.10	—
firejail_project	firejail	0.9.40 – 0.9.44.6	—

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

osv8.8HIGH

vendor_debian8.8HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.