CVE-2015-1815 The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
HighCVSS 10.0
EPSS 16.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selinux setroubleshoot | <= 3.2.21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
References
- FEDORA-2015-4833 vendor-advisory
- FEDORA-2015-4838 vendor-advisory
- FEDORA-2015-4792 vendor-advisory
- RHSA-2015:0729 vendor-advisory
- [oss-security] 20150326 Fwd: setroubleshoot root exploit (CVE-Request) exploit mailing-list
- 119966 vdb-entry
- 73374 vdb-entry
- bugzilla.redhat.com exploit
- bugzilla.redhat.com exploit
- github.com exploit
- 36564 exploit