CVE-2017-5226

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1250%

EPSS Percentile2.08th

Published2017年3月29日

Last Modified2026年5月13日

Vulnerability Description

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

Affected Platforms (CPE)

📦

Projectatomic

Bubblewrap

<= 0.1.5

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2020/07/10/1

🔗 http://www.openwall.com/lists/oss-security/2023/03/17/1

🔗 http://www.securityfocus.com/bid/97260

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=1411811

🔗 https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117

🔗 https://github.com/projectatomic/bubblewrap/issues/142

🔗 https://www.openwall.com/lists/oss-security/2023/03/14/2

🔗 http://www.openwall.com/lists/oss-security/2020/07/10/1

Vulnerability Description

Affected Platforms (CPE)

Bubblewrap

References & Advisories

相关漏洞威胁