PT-2017-8640 · Red Hat+1 · Setroubleshoot+2

Sebastian Krahmer + 1 · Publicado 2016-06-21 · Atualizado 2017-04-17 · CVE-2016-4989

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions setroubleshoot (affected versions not specified)

Description The issue allows local users to bypass an intended container protection mechanism and execute arbitrary commands. This can be achieved by triggering an SELinux denial with a crafted file name, handled by the set tpath function, or via a crafted local id or analysis id field in a crafted XML document to the run fix function. The vulnerability is related to the subprocess.check output and commands.getstatusoutput functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CESA-2016_1267

CESA-2016_1293

CVE-2016-4989

RHSA-2016:1267

RHSA-2016:1293

RHSA-2016_1267

RHSA-2016_1293

Produtos afetados

Centos

Red Hat

Setroubleshoot

Referências · 11

• https://github.com/fedora-selinux/setroubleshoot/commit/e69378d7e82a503534d29c5939fa219341e8f2ad · Correção
• https://github.com/fedora-selinux/setroubleshoot/commit/dda55aa50db95a25f0d919c3a0d5871827cdc40f · Correção
• https://rhn.redhat.com/errata/RHSA-2016-1267.html · Aviso do Fabricante
• http://securitytracker.com/id/1036144 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-4989 · Nota de Segurança
• http://seclists.org/oss-sec/2016/q2/574 · Nota
• https://linux.oracle.com/errata/ELSA-2016-1267.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2016:1293 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2016-1293.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4989 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1346461 · Nota