Base Score

HIGH8.8

CVE-2016-9016

Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

VectorLOCAL

Published Bycve@mitre.org

Published DateJan 19, 2017, 20:59

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://www.openwall.com/lists/oss-security/2016/10/25/3
http://www.openwall.com/lists/oss-security/2016/10/25/9
http://www.securityfocus.com/bid/93899

Base Score

HIGH8.8

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH