Vulnerability CVE-2017-7794

Vulnerability Name:

CVE-2017-7794 (CCN-130177)

Assigned:

2017-08-08

Published:

2017-08-08

Updated:

2019-10-03

Summary:

On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions.
Note: This attack only affects the Linux operating system. Other operating systems are not affected. This vulnerability affects Firefox < 55.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): None

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-276

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2017-7794

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1039124

Source: CONFIRM
Type: Exploit, Issue Tracking, Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1374281

Source: XF
Type: UNKNOWN
firefox-cve20177794-sec-bypass(130177)

Source: CCN
Type: Mozilla Foundation Security Advisory 2017-18
Security vulnerabilities fixed in Firefox 55

Source: CONFIRM
Type: Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-18/

Vulnerable Configuration:

Configuration 1:

cpe:/a:mozilla:firefox:*:*:*:*:*:*:*:* (Version < 55.0)

AND

cpe:/o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:mozilla:firefox:54.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20177794	V	CVE-2017-7794	2022-06-30
oval:org.opensuse.security:def:111899	P	MozillaFirefox-92.0-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105476	P	MozillaFirefox-92.0-1.2 on GA media (Moderate)	2021-10-01
oval:com.ubuntu.bionic:def:201777940000000	V	CVE-2017-7794 on Ubuntu 18.04 LTS (bionic) - medium.	2018-06-11
oval:com.ubuntu.artful:def:20177794000	V	CVE-2017-7794 on Ubuntu 17.10 (artful) - medium.	2018-06-11
oval:com.ubuntu.xenial:def:20177794000	V	CVE-2017-7794 on Ubuntu 16.04 LTS (xenial) - medium.	2018-06-11
oval:com.ubuntu.xenial:def:201777940000000	V	CVE-2017-7794 on Ubuntu 16.04 LTS (xenial) - medium.	2018-06-11
oval:com.ubuntu.bionic:def:20177794000	V	CVE-2017-7794 on Ubuntu 18.04 LTS (bionic) - medium.	2018-06-11
oval:com.ubuntu.disco:def:201777940000000	V	CVE-2017-7794 on Ubuntu 19.04 (disco) - medium.	2018-06-11
oval:com.ubuntu.cosmic:def:20177794000	V	CVE-2017-7794 on Ubuntu 18.10 (cosmic) - medium.	2018-06-11
oval:com.ubuntu.cosmic:def:201777940000000	V	CVE-2017-7794 on Ubuntu 18.10 (cosmic) - medium.	2018-06-11
oval:com.ubuntu.trusty:def:20177794000	V	CVE-2017-7794 on Ubuntu 14.04 LTS (trusty) - medium.	2018-06-11

BACK