CVE-2017-5940: firejail_project firejail Improper Privilege Management
Vulnerability summary
CVE-2017-5940 is a high (CVSS 8.8) Improper Privilege Management vulnerability in firejail_project firejail. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.5% of scored vulnerabilities.
Timeline
- 09-02-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-5180.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.36% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- firejail< 0.9.44.6-1
Firejail_project1 product
- firejail≥ 0.9.38, ≤ 0.9.38.10 | ≥ 0.9.40, ≤ 0.9.44.6
2 vendors · 2 products
References
8 links- github.com/netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863X Refsource MISCIssue TrackingPatchThird Party Advisory
- github.com/netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858fX Refsource MISCIssue TrackingPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2017/01/31/16X Refsource MISCMailing ListPatchThird Party Advisory
- github.com/netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592efX Refsource MISCIssue TrackingPatchThird Party Advisory
