cve/2017/CVE-2017-5207.md

### [CVE-2017-5207](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5207)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.

### POC

#### Reference
- https://github.com/netblue30/firejail/commit/5d43fdcd215203868d440ffc42036f5f5ffc89fc
- https://github.com/netblue30/firejail/issues/1023

#### Github
- https://github.com/ARPSyndicate/cvemon