Read the docs

Project Atomic

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Project Atomic records in CISA KEV

No Project Atomic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bubblewrap 3 records MEDIUM Oci-register-machine 1 record LOW

Records

5 records

TI-2017-03337 CVE-2017-5226 · GHSA-m28g-vfcm-85ff

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to…

Priority MEDIUM 49

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03195 Published 2017-03-29 No fix listed CWE-20
TI-2020-04347 CVE-2020-5291

Privilege escalation in setuid mode via user namespaces in Bubblewrap

Priority LOW 36

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00904 Published 2020-03-31 Fixed in 0.4.1 CWE-648
TI-2017-01874 CVE-2017-2623 · GHSA-v473-h83f-x76x

Improper certificate validation in Project Atomic rpm-ostree,

Priority LOW 26

It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering.

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.01013 Published 2018-07-27 Fixed CWE-295
Open these records in search →