Firejail CVE-2017-5207 Local Privilege Escalation Vulnerability

Firejail is prone to local privilege-escalation vulnerability.

An attacker can exploit this issue to gain root privileges.

Firejail versions prior to 0.9.44.4 are vulnerable.

Information

Bugtraq ID: 97385
Class: Design Error
CVE: CVE-2017-5207

Remote: No
Local: Yes
Published: Mar 23 2017 12:00AM
Credit: Martin Carpenter
Vulnerable: Firejail Firejail 0.9.44
Firejail Firejail 0.9.44.2
Firejail Firejail 0.9.38.6
Firejail Firejail 0.9.38.4
Firejail Firejail 0.9.38.10

Not Vulnerable: Firejail Firejail 0.9.44.6
Firejail Firejail 0.9.44.4

References:

• Firejail Homepage (Firejail)
  
• Firejail Release Notes (Firejail)
  
• Root shell via --bandwidth and --shell #1023 (NetBlue)
  
• security fix (NetBlue)
  
• Firejail: Multiple vulnerabilities â?? GLSA 201701-62 (Gentoo)
  

Source: www.securityfocus.com