CVE-2019-12439 — 脆弱性インテリジェンス

projectatomic — bubblewrap

公表日: 2019-05-29T14:42:08.000Z

CVSS

7.4

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.

情報源

• CVE-2019-12439
• Original advisory
• Issue Tracking, Third Party Advisory
• Patch, Third Party Advisory
• Third Party Advisory
• Release Notes, Third Party Advisory
• Original advisory
• CVE-2019-12439