When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-03-29T00:00:00

Updated: 2024-08-05T14:55:35.806Z

Reserved: 2017-01-09T00:00:00

Link: CVE-2017-5226

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-03-29T20:59:00.310

Modified: 2023-03-17T12:15:11.703

Link: CVE-2017-5226

cve-icon Redhat

No data.