CVE-2017-5123

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.71% chance of exploitation in the next 30 days, 89th percentile

Published

2021-11-02

Updated

2024-08-05

Proof-of-concept exploits (9)

• 0x5068656e6f6c/CVE-2017-51235★ · 2017-11-03
• FloatingGuy/CVE-2017-51231★ · 2017-10-31
• Synacktiv-contrib/exploiting-cve-2017-51234★ · 2018-03-01
• c3r34lk1ll3r/CVE-2017-512333★ · 2020-06-26
• echo-devim/exploit_linux_kernel4.131★ · 2022-03-11
• h1bAna/CVE-2017-51230★ · 2023-03-11
• shamedgh/container-privilege-escalation0★ · 2021-11-08
• teawater/CVE-2017-51230★ · 2018-12-24
• NabilBoudra/cve-2017-5123

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/43127
• https://www.exploit-db.com/exploits/43029

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2017/CVE-2017-5123

References

• CVE Record
• NVD entry

Related

• CVE-2015-1805
• CVE-2018-4193
• CVE-2018-7105
• CVE-2017-11176
• CVE-2018-7211
• CVE-2019-2215