CVE-2016-4446 The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput func...
HighCVSS 7.0
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| setroubleshoot project setroubleshoot | <= - | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- [oss-security] 20160621 Re: SELinux troubles exploit mailing-list patch third-party-advisory
- 91427 third-party-advisory vdb-entry
- 1036144 third-party-advisory vdb-entry
- RHSA-2016:1293 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking
- github.com patch
- RHSA-2016:1267 third-party-advisory vendor-advisory