CVE-2019-12589
- Source
- https://cve.org/CVERecord?id=CVE-2019-12589
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12589.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-12589
- Downstream
- Related
- Published
- 2019-06-03T03:29:00.320Z
- Modified
- 2026-02-14T07:23:28.606400Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker.
- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDY7B73YDRBURA25APSHD5PFEO4TNSFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGVULJ6IKVDO6UAVIQRHQVSKOUD6QDWM/
- https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134
- https://github.com/netblue30/firejail/issues/2718
- https://github.com/netblue30/firejail/releases/tag/0.9.60
- https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134
- https://github.com/netblue30/firejail/issues/2718
- https://github.com/netblue30/firejail/issues/2718
Affected packages
Git / github.com/netblue30/firejail
Affected ranges
- Type
- GIT
- Repo
- https://github.com/netblue30/firejail
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.9.30
0.9.30-rc1
0.9.32
0.9.32-rc1
0.9.34
0.9.34-rc1
0.9.36
0.9.36-rc1
0.9.38
0.9.38-rc1
0.9.40
0.9.40-rc1
0.9.42
0.9.42-rc1
0.9.42-rc2
0.9.44
0.9.44-rc1
0.9.46-rc1
0.9.48
0.9.50-rc1
0.9.52
0.9.54
0.9.54-rc1
0.9.54-rc2
0.9.56
0.9.56-rc1
0.9.58
0.9.58-rc1
0.9.58.2
0.9.60-rc1
Other
disable-globalcfg