Security Advisory

CVE-2019-12439

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-29 14:42:08
Last updated 2024-08-04 23:17:40
Assigner mitre
State PUBLISHED

Description

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.