CVE-2017-5180

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.

• CWE-862

• http://openwall.com/lists/oss-security/2017/01/04/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95298Third Party Advisory, VDB Entry
• https://firejail.wordpress.com/download-2/release-notes/Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201701-62Third Party Advisory
• http://openwall.com/lists/oss-security/2017/01/04/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95298Third Party Advisory, VDB Entry
• https://firejail.wordpress.com/download-2/release-notes/Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/201701-62Third Party Advisory

Published

Feb 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Con…
• CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Control…
• CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server…
• CVE-2017-5179Cross-site scripting (XSS) vulnerability in Tenable Nessus b…
• CVE-2017-5181Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-5182Remote Manager in Open Enterprise Server (OES) allows unauth…
• CVE-2017-5183NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when con…
• CVE-2017-5184A vulnerability was discovered in NetIQ Sentinel Server 8.0 …
• CVE-2017-5185A vulnerability was discovered in NetIQ Sentinel Server 8.0 …
• CVE-2017-5186Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x b…