CVE-2017-5226

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

CVSS v3.0 NVD

10.0 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.17% chance of exploitation in the next 30 days, 88th percentile

Published

2017-03-29

Updated

2024-08-05

Proof-of-concept exploits (1)

• projectatomic/bubblewrap/issues/1429078★ · 2026-10-14

Security advisories

• http://www.securityfocus.com/bid/97260
• https://bugzilla.redhat.com/show_bug.cgi?id=1411811

References

• CVE Record
• NVD entry