CVE-2017-5226

Critical

Published: 29/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-5226 allows a nonprivileged session to escape the bubblewrap sandbox by using the TIOCSTI ioctl to push characters into the terminal's input buffer.

Risk Assessment

An attacker could gain access to the operating system outside of the controlled environment, posing a serious threat to data and system security.

Recommendation

It is recommended to update bubblewrap to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.