vulnerability

Oracle Solaris 11: CVE-2017-5226 (11.4 SRU 26.75.4)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Mar 29, 2017
Added
Jan 19, 2021
Modified
Feb 17, 2022

Description

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

Solution

oracle-solaris-11-4-upgrade-library-desktop-webkitgtk4-2-28-4-11-4-26-0-1-75-3

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today