CVE:CVE-2020-5291
CNNVD:CNNVD-202003-1744
Bubblewrap是一套非特权沙盒工具。
Bubblewrap (bwrap) 0.4.1之前版本中存在安全漏洞。攻击者可利用该漏洞获取root权限。
solution:Upgrade projectatomic bubblewrap to a higher version than 0.4.1,and avoid the version (,0.4.1); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade archlinux arch_linux to a higher version than -; Upgrade centos centos to a higher version than 7.0,and avoid the version 7.0