NVD

Id
84049  
Name
CVE-2017-5226  
Description
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-03-29  
Modified Date
2017-04-10  
Seq
2017-5226  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412322 84049 CVE-2017-6413 96549  View
412323 84049 CVE-2017-6413 https://github.com/pingidentity/mod_auth_openidc/blob/master/ChangeLog  View
412324 84049 CVE-2017-6413 https://github.com/pingidentity/mod_auth_openidc/commit/21e3728a825c41ab41efa75e664108051bb9665e  View
412325 84049 CVE-2017-6413 https://github.com/pingidentity/mod_auth_openidc/releases/tag/v2.1.6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66582 JVNDB-2017-002907 Bubblewrap における入力確認に関する脆弱性 Bubblewrap には、入力確認に関する脆弱性が存在します。 CVE-2017-5226 0 CVE-2017-5226 84049 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002907.html 2017-01-10 2017-05-08 View