TI-2016-07121 CVE-2016-8659 · GHSA-q7w7-m7vg-xxg8
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to…
Priority LOW 31
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.