CVE-2017-5206

Critical

Description

Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.

SeverityCritical

CVSS9.0

Exploit probability80. percentile1.9%

ProductFirejail

PublishedMar 23, 2017

First seenMar 23, 2017

How to fix

Update

firejail_project firejail0.9.44.4 or later

Vendor advisories

security.gentoo.org/glsa/201701-62

Affected products

Product	Affected versions	Fixed in
firejail_project firejail	v < 0.9.44.4	0.9.44.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.