Skip to content
OpenAdvisories

Package · Alpine

bubblewrap

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2020-5291

    Privilege escalation in setuid mode via user namespaces in Bubblewrap

    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be…

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu Alpine