Vulnerability CVE-2021-42762

Vulnerability CVE-2021-42762

Published: 2021-10-20

Description:

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact is limited to host services that create UNIX sockets that WebKit mounts inside its sandbox, and the sandboxed process remains otherwise confined. NOTE: this is similar to CVE-2021-41133.

Type:

NVD-CWE-Other

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
4.6/10	6.4/10	3.9/10

Exploit range	Attack complexity	Authentication
Local	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Wpewebkit -> Wpe webkit
Webkitgtk -> Webkitgtk

References:

https://bugs.webkit.org/show_bug.cgi?id=231479

https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q

http://www.openwall.com/lists/oss-security/2021/10/26/9

http://www.openwall.com/lists/oss-security/2021/10/27/1

http://www.openwall.com/lists/oss-security/2021/10/27/2

http://www.openwall.com/lists/oss-security/2021/10/27/4

Copyright 2024, cxsecurity.com