CVE-2019-12499

published 2019-05-31

CVE-2019-12499: Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having…

Priority P3 46 high 8.1 CVSS 3.0

AV N AC H PR N UI N S U C H I H A H

Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) needs to be started as root, and it also needs to be terminated as root from the host (either by stopping it ungracefully (e.g., SIGKILL), or by using the --shutdown control command). This is similar to CVE-2019-5736.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	firejail	< firejail 0.9.58.2-2 (bookworm)	firejail 0.9.58.2-2 (bookworm)
firejail_project	firejail	< 0.9.60	0.9.60
firejail_project	firejail	>= 0 < 0.9.58.2-2	0.9.58.2-2
firejail_project	firejail	>= 0 < 0.9.58.2-2	0.9.58.2-2
firejail_project	firejail	>= 0 < 0.9.58.2-2	0.9.58.2-2
firejail_project	firejail	>= 0 < 0.9.58.2-2	0.9.58.2-2

CVSS provenance

nvd v3.0 8.1 HIGH CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

osv 8.1 HIGH

vendor_debian 8.1 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.