PT-2017-8489 · Red Hat+1 · Setroubleshoot+2

Milos Malik · Publicado 2016-06-21 · Atualizado 2017-04-17 · CVE-2016-4444

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions setroubleshoot versions prior to 3.2.23

Description The issue allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename. This is related to the commands.getstatusoutput function.

Recommendations For versions prior to 3.2.23, update to version 3.2.23 or later to resolve the issue.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CESA-2016_1267

CESA-2016_1293

CVE-2016-4444

RHSA-2016:1267

RHSA-2016:1293

RHSA-2016_1267

RHSA-2016_1293

Produtos afetados

Centos

Red Hat

Setroubleshoot

Referências · 11

• 🔥 http://seclists.org/oss-sec/2016/q2/575 · Exploit
• https://github.com/fedora-selinux/setroubleshoot/commit/5cd60033ea7f5bdf8c19c27b23ea2d773d9b09f5 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=1332644 · Correção
• https://rhn.redhat.com/errata/RHSA-2016-1267.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-1267.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2016:1293 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4444 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2016-1293.html · Aviso do Fabricante
• http://securitytracker.com/id/1036144 · Nota
• http://securityfocus.com/bid/91476 · Nota
• https://osv.dev/vulnerability/CVE-2016-4444 · Aviso do Fabricante