CVE-2017-5940
Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.36%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-5180.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 0.36% probability · 30th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- firejail project/firejail
- Source
- cve@mitre.org
EPSS 0.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.openwall.com/lists/oss-security/2017/01/31/16Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/96221Third Party Advisory, VDB Entry
- https://firejail.wordpress.com/download-2/release-notes/Release Notes, Vendor Advisory
- https://github.com/netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858fIssue Tracking, Patch, Third Party Advisory
- https://github.com/netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592efIssue Tracking, Patch, Third Party Advisory
- https://github.com/netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201702-03Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/31/16Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/96221Third Party Advisory, VDB Entry
- https://firejail.wordpress.com/download-2/release-notes/Release Notes, Vendor Advisory
- https://github.com/netblue30/firejail/commit/38d418505e9ee2d326557e5639e8da49c298858fIssue Tracking, Patch, Third Party Advisory
- https://github.com/netblue30/firejail/commit/903fd8a0789ca3cc3c21d84cd0282481515592efIssue Tracking, Patch, Third Party Advisory
- https://github.com/netblue30/firejail/commit/b8a4ff9775318ca5e679183884a6a63f3da8f863Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/201702-03Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.