Red Hat Security AdvisoryRHSA-2016:1293
setroubleshoot and setroubleshoot-plugins security update
Released 2016-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) setroubleshoot-3.2.24-4.el7_2, setroubleshoot-plugins-3.0.59-2.el7_2, setroubleshoot-server-3.2.24-4.el7_2
- Red Hat Enterprise Linux Server (v. 7) setroubleshoot-3.2.24-4.el7_2, setroubleshoot-plugins-3.0.59-2.el7_2, setroubleshoot-server-3.2.24-4.el7_2
- Red Hat Enterprise Linux Workstation (v. 7) setroubleshoot-3.2.24-4.el7_2, setroubleshoot-plugins-3.0.59-2.el7_2, setroubleshoot-server-3.2.24-4.el7_2
Fixes 3 records
Priority LOW 31
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath funct…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00458 · Published 2017-04-11 · Fixed CWE-77
Priority LOW 31
The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2017-04-11 · Fixed CWE-77
Priority LOW 31
The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput f…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2017-04-11 · Fixed CWE-77
THREATIST.IORead the docs