Priority LOW 36
Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root whi…
Vulnerabilities
5 records
TI-2019-09282 CVE-2019-12439 · GHSA-hj8h-43q8-g8vp
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount…
Priority LOW 35
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.
TI-2017-01874 CVE-2017-2623 · GHSA-v473-h83f-x76x
Improper certificate validation in Project Atomic rpm-ostree,
Priority LOW 26
It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering.
TI-2016-05437 CVE-2016-6349
The machinectl command in oci-register-machine allows local users to list running…
Priority LOW 16
The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.
TI-2017-03337 CVE-2017-5226 · GHSA-m28g-vfcm-85ff
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to…
Priority MEDIUM 49
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the…