CVE-2016-4444 The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the comman...
HighCVSS 7.0
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| setroubleshoot project setroubleshoot | <= 3.2.22 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- [oss-security] 20160621 Re: SELinux troubles exploit mailing-list patch third-party-advisory
- 91476 third-party-advisory vdb-entry
- 1036144 third-party-advisory vdb-entry
- RHSA-2016:1293 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking patch
- github.com patch
- RHSA-2016:1267 third-party-advisory vendor-advisory