vulnerability
SUSE: CVE-2017-7794: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:P/I:P/A:P) | Aug 8, 2017 | May 20, 2018 | Oct 31, 2019 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 8, 2017
Added
May 20, 2018
Modified
Oct 31, 2019
Description
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.
Solutions
suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-other
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.