CVE-2021-26910

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.44%

Published

Feb 8, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-367

Affected Products (3)

firejail_project · firejail (up to 0.9.64.4)vulnerable

debian · debian_linuxvulnerable

References (16)

http://www.openwall.com/lists/oss-security/2021/02/09/1

ExploitMailing ListPatch

https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834b

PatchThird Party Advisory

https://github.com/netblue30/firejail/releases/tag/0.9.64.4

Release NotesThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/02/msg00015.html

Third Party Advisory

https://security.gentoo.org/glsa/202105-19

Third Party Advisory

https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/

ExploitThird Party Advisory

https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txt

ExploitThird Party Advisory

https://www.debian.org/security/2021/dsa-4849

Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/02/09/1

ExploitMailing ListPatch

https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834b

PatchThird Party Advisory

https://github.com/netblue30/firejail/releases/tag/0.9.64.4

Release NotesThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/02/msg00015.html

Third Party Advisory

https://security.gentoo.org/glsa/202105-19

Third Party Advisory

https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/

ExploitThird Party Advisory

https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txt

ExploitThird Party Advisory

https://www.debian.org/security/2021/dsa-4849

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs