CVE-2017-5180: firejail_project firejail Missing Authorization
Vulnerability summary
CVE-2017-5180 is a high (CVSS 8.8) Missing Authorization vulnerability in firejail_project firejail. EPSS estimates a 0.74% chance of exploitation in the next 30 days, higher than 54.1% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 09-02-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.74%
Chance of exploitation in the next 30 days
Percentile
54%
Versus all other CVEs
30-day change
-0.06 pp
From 0.80% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundFirejail < 0.9.44.4 / < 0.9.38.8 LTS - Local Sandbox Escape
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian1 product
- firejail< 0.9.44.2-3
Firejail_project1 product
- firejail< 0.9.44.4 | ≥ 0.9.38, < 0.9.38.8
Ubuntu1 product
- firejail< 0.9.38-1ubuntu0.1
3 vendors · 3 products
