Arbitrary Command Execution

setroubleshoot is vulnerable to arbitrary command execution. The vulnerability exists due to the ability to trigger a SELinux denial through a file name, handled by the settpath function...

Arbitrary Command Execution

setroubleshoot is vulnerable to arbitrary command execution. The vulnerability exists through the fixlookupid function...

Arbitrary Code Execution

setroubleshoot is vulnerable to arbitrary code execution. Shell command injection flaws were found in the way the setroubleshoot executed external commands. A local attacker able to trigger certain SELinux denials could use these flaws to execute arbitrary code with root privileges...

Arbitrary Code Execution

setroubleshoot is vulnerable to arbitrary code execution. Files names that are supplied in a shell command look-up for RPMs associated with access violation reports are not sanitized, allowing an attacker to enter shell metacharacters in a file name and subsequently executing arbitrary commands o...

EulerOS 2.0 SP1 : setroubleshoot, setroubleshoot-plugins (EulerOS-SA-2016-1033)

According to the versions of the setroubleshoot, setroubleshoot-plugins packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache AVC messag...

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

Design/Logic Flaw

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

Design/Logic Flaw

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

Xxe

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

CVE-2016-4446

The allowexecstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function...

CVE-2016-4445

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

CVE-2016-4989

CVE-2016-4989 affects setroubleshoot and setroubleshoot-plugins. Local users can bypass container protections and execute arbitrary commands by triggering an SELinux denial via a crafted file name (handled by _set_tpath in audit_data.py) or via crafted local_id/analysis_id fields in a crafted XML...

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

CVE-2016-4444

CVE-2016-4444 details (from provided docs): The vulnerability affects the setroubleshoot ecosystem (the setroubleshoot package and its setroubleshoot-plugins) where an execmod denial can be triggered by crafting a binary filename. This allows a local user to execute arbitrary commands via the SEL...

CVE-2016-4445

CVE-2016-4445 affects setroubleshoot: the fix_lookup_id function in sealert before 3.2.23 allows local users to run arbitrary commands as root by triggering an SELinux denial with a crafted filename, using commands.getstatusoutput. Affected: setroubleshoot prior to 3.2.23. Mitigation: upgrade to ...

CVE-2016-4446

CVE-2016-4446 affects the setroubleshoot ecosystem (the allow_execstack plugin) and enables local users to run arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to commands.getoutput. Evidence across sources (Red Hat/AXSA entries and EulerOS/OpenVAS/NAS...