Unrated severityNVD Advisory· Published Aug 11, 2020· Updated Aug 4, 2024
CVE-2020-17368
CVE-2020-17368
Description
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Firejail/Firejaildescription
- osv-coords2 versionspkg:rpm/opensuse/firejail&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/firejail&distro=openSUSE%20Tumbleweed
< 0.9.62-lp152.3.3.1+ 1 more
- (no CPE)range: < 0.9.62-lp152.3.3.1
- (no CPE)range: < 0.9.66-1.2
Patches
Vulnerability mechanics
References
7- lists.opensuse.org/opensuse-security-announce/2020-08/msg00036.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFXN3JJG4DIMN4TAHOTKFMS7SGM4EOTR/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W66IR5YT4KG464SKEMQN2NP2LGATGEGS/mitrevendor-advisoryx_refsource_FEDORA
- security.gentoo.org/glsa/202101-02mitrevendor-advisoryx_refsource_GENTOO
- www.debian.org/security/2020/dsa-4742mitrevendor-advisoryx_refsource_DEBIAN
- www.debian.org/security/2020/dsa-4743mitrevendor-advisoryx_refsource_DEBIAN
- lists.debian.org/debian-lts-announce/2020/08/msg00033.htmlmitremailing-listx_refsource_MLIST
News mentions
0No linked articles in our index yet.