Search for packages
| purl | pkg:alpm/archlinux/firejail@0.9.44.2-1 |
| Next non-vulnerable version | 0.9.44.10-1 |
| Latest non-vulnerable version | 0.9.64.4-1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-287d-4ufd-73aq
Aliases: CVE-2016-10119 |
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-2e1r-1ef8-qqan
Aliases: CVE-2017-5180 |
Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. |
Affected by 0 other vulnerabilities. |
|
VCID-3xpj-myft-tfc4
Aliases: CVE-2017-5207 |
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. |
Affected by 0 other vulnerabilities. |
|
VCID-5nem-4rvk-p3ap
Aliases: CVE-2017-5206 |
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument. |
Affected by 0 other vulnerabilities. |
|
VCID-63e4-p5kk-cqbd
Aliases: CVE-2016-10123 |
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-f4wj-e8v6-kqdz
Aliases: CVE-2016-10117 |
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc. |
Affected by 0 other vulnerabilities. |
|
VCID-fk16-qxdv-cbha
Aliases: CVE-2016-10120 |
Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-gpav-za1b-mkas
Aliases: CVE-2016-10122 |
Firejail does not properly clean environment variables, which allows local users to gain privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-r3h7-skuu-aqcb
Aliases: CVE-2016-10121 |
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. |
Affected by 0 other vulnerabilities. |
|
VCID-wev9-a832-eyg4
Aliases: CVE-2016-10118 |
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-12-19T19:53:36.219094+00:00 | Arch Linux Importer | Affected by | VCID-f4wj-e8v6-kqdz | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.198722+00:00 | Arch Linux Importer | Affected by | VCID-wev9-a832-eyg4 | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.180233+00:00 | Arch Linux Importer | Affected by | VCID-287d-4ufd-73aq | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.160430+00:00 | Arch Linux Importer | Affected by | VCID-fk16-qxdv-cbha | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.141489+00:00 | Arch Linux Importer | Affected by | VCID-r3h7-skuu-aqcb | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.122692+00:00 | Arch Linux Importer | Affected by | VCID-gpav-za1b-mkas | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.102822+00:00 | Arch Linux Importer | Affected by | VCID-63e4-p5kk-cqbd | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.084853+00:00 | Arch Linux Importer | Affected by | VCID-2e1r-1ef8-qqan | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.067466+00:00 | Arch Linux Importer | Affected by | VCID-5nem-4rvk-p3ap | https://security.archlinux.org/AVG-128 | 37.0.0 |
| 2025-12-19T19:53:36.046257+00:00 | Arch Linux Importer | Affected by | VCID-3xpj-myft-tfc4 | https://security.archlinux.org/AVG-128 | 37.0.0 |