Red Hat Security AdvisoryRHSA-2016:1267
setroubleshoot and setroubleshoot-plugins security update
Released 2016-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) setroubleshoot-3.0.47-12.el6_8, setroubleshoot-plugins-3.0.40-3.1.el6_8, setroubleshoot-server-3.0.47-12.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) setroubleshoot-doc-3.0.47-12.el6_8
- Red Hat Enterprise Linux Server (v. 6) setroubleshoot-3.0.47-12.el6_8, setroubleshoot-plugins-3.0.40-3.1.el6_8, setroubleshoot-server-3.0.47-12.el6_8
- Red Hat Enterprise Linux Server Optional (v. 6) setroubleshoot-doc-3.0.47-12.el6_8
- Red Hat Enterprise Linux Workstation (v. 6) setroubleshoot-3.0.47-12.el6_8, setroubleshoot-plugins-3.0.40-3.1.el6_8, setroubleshoot-server-3.0.47-12.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 6) setroubleshoot-doc-3.0.47-12.el6_8
Fixes 4 records
Priority LOW 31
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath funct…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00458 · Published 2017-04-11 · Fixed CWE-77
Priority LOW 31
The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2017-04-11 · Fixed CWE-77
Priority LOW 31
The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external comma…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2017-04-11 · Fixed CWE-77
Priority LOW 31
The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput f…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2017-04-11 · Fixed CWE-77
THREATIST.IORead the docs