ubuntu · CVE-2016-10120

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-10120 medium priority: Ubuntu including 1 source packages (firejail), 5 status rows across 5 suites (precise, trusty, upstream, xenial, yakkety): DNE 2, not-affected 2, released 1.

Description:

Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges.