Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-8659 →
DEBIAN-CVE-2016-8659
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated b...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
bubblewrap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-2"}]}]
Debian:13
bubblewrap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-2"}]}]
Debian:14
bubblewrap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-2"}]}]
Références
- advisory security-tracker.debian.org