vulnerability

SUSE: CVE-2020-17367: SUSE Linux Security Advisory

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

Aug 11, 2020

Added

Aug 15, 2020

Modified

Oct 22, 2021

Description

Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.

suse-upgrade-firejail

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.