CVE:CVE-2020-17367
CNNVD:CNNVD-202008-275
Firejail是一款使用C语言编写的SUID沙箱程序。
Firejail 0.9.62 版本及之前版本中存在参数注入漏洞。攻击者可借助 -- 分隔符利用该漏洞覆盖任意文件。
solution:Upgrade firejail_project firejail to a higher version than 0.9.62,and avoid the version (,0.9.62]; Upgrade debian debian_linux to a higher version than 10.0,9.0,and avoid the version 10.0,9.0; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2