CVE-2017-5226

10.0 criticalEPSS 3.2%

Critical (10.0) in projectatomic bubblewrap. EPSS 3.2% chance of exploitation in the next 30 days.

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the sandbox.

Severity

CVSS 3.0

10.0 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

projectatomic:bubblewrap

References

http://www.openwall.com/lists/oss-security/2020/07/10/1
http://www.openwall.com/lists/oss-security/2023/03/17/1
http://www.securityfocus.com/bid/97260
https://bugzilla.redhat.com/show_bug.cgi?id=1411811
https://github.com/projectatomic/bubblewrap/commit/d7fc532c42f0e9bf427923bab85433282b3e5117

Check your stack JSON