Read the docs

Project Atomic

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Project Atomic records in CISA KEV

No Project Atomic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bubblewrap 3 records MEDIUM Oci-register-machine 1 record LOW

Records

3 records in Bubblewrap · all components

TI-2017-03337 CVE-2017-5226 · GHSA-m28g-vfcm-85ff

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to…

Priority MEDIUM 49

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the…

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03195 Published 2017-03-29 No fix listed CWE-20
TI-2020-04347 CVE-2020-5291

Privilege escalation in setuid mode via user namespaces in Bubblewrap

Priority LOW 36

Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root whi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00904 Published 2020-03-31 Fixed in 0.4.1 CWE-648
Open these records in search →