High severity7.8NVD Advisory· Published Aug 11, 2020· Updated Jun 17, 2026
CVE-2020-17367
CVE-2020-17367
Description
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*range: <=0.9.62
- (no CPE)range: <=0.9.62
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- Firejail/Firejaildescription
- osv-coords2 versionspkg:rpm/opensuse/firejail&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/firejail&distro=openSUSE%20Tumbleweed
< 0.9.62-lp152.3.3.1+ 1 more
- (no CPE)range: < 0.9.62-lp152.3.3.1
- (no CPE)range: < 0.9.66-1.2
Patches
Vulnerability mechanics
References
7- lists.opensuse.org/opensuse-security-announce/2020-08/msg00036.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/08/msg00033.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202101-02nvdThird Party Advisory
- www.debian.org/security/2020/dsa-4742nvdThird Party Advisory
- www.debian.org/security/2020/dsa-4743nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFXN3JJG4DIMN4TAHOTKFMS7SGM4EOTR/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W66IR5YT4KG464SKEMQN2NP2LGATGEGS/nvd
News mentions
0No linked articles in our index yet.