CVE-2017-5226

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

• CWE-20

• http://www.openwall.com/lists/oss-security/2020/07/10/1
• http://www.openwall.com/lists/oss-security/2023/03/17/1
• http://www.securityfocus.com/bid/97260Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1411811Issue Tracking, Patch
• https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117Patch
• https://github.com/projectatomic/bubblewrap/issues/142Exploit, Patch, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2023/03/14/2
• http://www.openwall.com/lists/oss-security/2020/07/10/1
• http://www.openwall.com/lists/oss-security/2023/03/17/1
• http://www.securityfocus.com/bid/97260Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1411811Issue Tracking, Patch
• https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117Patch
• https://github.com/projectatomic/bubblewrap/issues/142Exploit, Patch, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2023/03/14/2

Published

Mar 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5216Stack-based buffer overflow vulnerability in Netop Remote Co…
• CVE-2017-5217Installing a zero-permission Android application on certain …
• CVE-2017-5218A SQL Injection issue was discovered in SageCRM 7.x before 7…
• CVE-2017-5219An issue was discovered in SageCRM 7.x before 7.3 SP3. The C…
• CVE-2017-5223An issue was discovered in PHPMailer before 5.2.22. PHPMaile…
• CVE-2017-5225LibTIFF version 4.0.7 is vulnerable to a heap buffer overflo…8.8
• CVE-2017-5227QNAP QTS before 4.2.4 Build 20170313 allows local users to o…
• CVE-2017-5228All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5229All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5230The Java keystore in all versions and editions of Rapid7 Nex…
• CVE-2017-5231All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5232All editions of Rapid7 Nexpose installers prior to version 6…