Design/Logic Flaw

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

PT-2017-8489

Name of the Vulnerable Software and Affected Versions setroubleshoot versions prior to 3.2.23 Description The issue allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename. This is related to the commands.getstatusoutput function...