VULNERABILITY INTELLIGENCE

CVE-2017-5226

CVSS score10 CRITICAL
EPSS probability3.17%
CISA KEVNot currently listed
Published2017-03-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references