CVE-2017-5226

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1250%

EPSS Percentile2.08th

PublishedMar 29, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

Affected Platforms (CPE)

📦

Projectatomic

Bubblewrap

<= 0.1.5

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2020/07/10/1

🔗 http://www.openwall.com/lists/oss-security/2023/03/17/1

🔗 http://www.securityfocus.com/bid/97260

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1411811

🔗 https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117

🔗 https://github.com/projectatomic/bubblewrap/issues/142

🔗 https://www.openwall.com/lists/oss-security/2023/03/14/2

🔗 http://www.openwall.com/lists/oss-security/2020/07/10/1

Vulnerability Description

Affected Platforms (CPE)

Bubblewrap

References & Advisories

Related Vulnerabilities