CVE-2019-12499 - CVE House
Back to Database
Status published High CVE-2019-12499

Firejail before 0.9.60 allows truncation (resizing to length 0) of...

Vulnerability Description

Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) needs to be started as root, and it also needs to be terminated as root from the host (either by stopping it ungracefully (e.g., SIGKILL), or by using the --shutdown control command). This is similar to CVE-2019-5736.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12499

Credits & Attribution

No credits recorded in the NVD database.

References

More from firejail project

View All →
CVE-2022-31214
A Privilege Context Switching issue was discovered in join.c in...
High 7.8
CVE-2021-26910
Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions...
High 7.8
CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the...
Critical 9.8
CVE-2020-17367
Firejail through 0.9.62 does not honor the -- end-of-options indicator...
High 7.8
CVE-2019-12589
In Firejail before 0.9.60, seccomp filters are writable inside the...
High 8.8

Affected Vendor

firejail project

View all reports →

Affected Software

firejail
Vulnerable Versions:
0

Timeline

Official Publish: May 31st, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.