CRITICAL10.0CVE-2017-5226When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to pus…
from 0, < 0.1.5-2
HIGH7.8CVE-2020-5291Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap…
from 0, < 0.4.1-1
HIGH7.8CVE-2019-12439bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.
from 0, < 0.3.1-3
HIGH7.0Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as dem…
from 0, < 0.1.2-2
—bubblewrap is a low-level unprivileged sandboxing tool.