CVE-2017-5206

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.

References

Affected packages

Git / github.com/netblue30/firejail

Affected ranges

Type: GIT
Repo: https://github.com/netblue30/firejail
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

6b8dba29d73257311564ee7f27b9b14758cc693e

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5206.json"

vanir_signatures

[
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/netblue30/firejail/commit/6b8dba29d73257311564ee7f27b9b14758cc693e",
        "digest": {
            "function_hash": "65792200794165758615890651797367375440",
            "length": 325.0
        },
        "id": "CVE-2017-5206-66366121",
        "deprecated": false,
        "target": {
            "file": "src/firejail/main.c",
            "function": "detect_allow_debuggers"
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/netblue30/firejail/commit/6b8dba29d73257311564ee7f27b9b14758cc693e",
        "digest": {
            "line_hashes": [
                "54599638741106254987302327452253934160",
                "33607893010149723093548560133734141643",
                "240378706286755339177978268301134147669",
                "338742974002775008775820326758804651198",
                "48639820909732886781516077881910579693",
                "38338447638600750539827456274630738234",
                "151420242146240698399504753220659614634",
                "190608544414440206834505349026983060588"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2017-5206-6d0d65a2",
        "deprecated": false,
        "target": {
            "file": "src/firejail/main.c"
        }
    }
]