{"id":"CVE-2017-5180","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5180","generatedAt":"2026-10-28T23:38:34.509Z","title":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors…","description":"Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.","published":"2017-02-09T18:59:00.000Z","lastModified":"2026-06-17T01:20:07.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-862"],"affected":["firejail project/firejail"],"epss":{"score":0.00742,"percentile":0.54471,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2017-01-04","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43359,"kind":"exploit","title":"Firejail < 0.9.44.4 / < 0.9.38.8 LTS - Local Sandbox Escape","url":"https://www.exploit-db.com/exploits/43359","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/43359.c","file":"exploits/linux/local/43359.c","published":"2017-01-04","added":"2017-12-18","updated":"2017-12-18","author":"Sebastian Krahmer","type":"local","platform":"linux","port":null,"verified":false,"codes":["CVE-2017-5180"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://seclists.org/oss-sec/2017/q1/20"}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 0.7%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://openwall.com/lists/oss-security/2017/01/04/2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/95298","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://firejail.wordpress.com/download-2/release-notes/","tags":["Release Notes","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201701-62","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2017/01/04/2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/95298","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://firejail.wordpress.com/download-2/release-notes/","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201701-62","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5180","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}