Total vulnerabilities in the database
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.
Software | From | Fixed in |
---|---|---|
wpewebkit / wpe_webkit | - | 2.28.3 |
webkitgtk / webkitgtk | - | 2.28.3 |
fedoraproject / fedora | 31 | 31.x |
debian / debian_linux | 10.0 | 10.0.x |
canonical / ubuntu_linux | 18.04 | 18.04.x |
canonical / ubuntu_linux | 19.10 | 19.10.x |
canonical / ubuntu_linux | 20.04 | 20.04.x |
opensuse / leap | 15.1 | 15.1.x |