PT-2017-8490 · Red Hat+1 · Setroubleshoot+2

Tomas Hoger · Publicado 2016-06-21 · Atualizado 2017-04-17 · CVE-2016-4445

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions setroubleshoot versions prior to 3.2.23

Description The issue allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name. This is related to executing external commands with the commands.getstatusoutput function in the fix lookup id function in sealert.

Recommendations For versions prior to 3.2.23, update to version 3.2.23 or later to resolve the issue. As a temporary workaround, consider restricting the use of the fix lookup id function in sealert until a patch is available.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CESA-2016_1267

CVE-2016-4445

RHSA-2016:1267

RHSA-2016_1267

Produtos afetados

Centos

Red Hat

Setroubleshoot

Referências · 9

• 🔥 http://seclists.org/oss-sec/2016/q2/575 · Exploit
• https://github.com/fedora-selinux/setroubleshoot/commit/2d12677629ca319310f6263688bb1b7f676c01b7 · Correção
• https://rhn.redhat.com/errata/RHSA-2016-1267.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1339183 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4445 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2016-1267.html · Aviso do Fabricante
• http://securitytracker.com/id/1036144 · Nota
• http://securityfocus.com/bid/91430 · Nota
• https://osv.dev/vulnerability/CVE-2016-4445 · Aviso do Fabricante