CVE Catalog
CVE-2017-5206
CriticalSummary
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.
Risk Assessment
Bypassing the protection mechanism may lead to unauthorized access to the system and potential execution of malicious code.
Recommendation
It is recommended to update Firejail to the latest version and use a Linux kernel version 4.8 or newer.
Original NVD description (English source)
Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism via the --allow-debuggers argument.