The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade setroubleshootUpgrade setroubleshoot-serverUpgrade setroubleshoot-docUpgrade setroubleshoot-plugins | Jul 22, 2016 | Jun 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade setroubleshootUpgrade setroubleshoot-serverUpgrade setroubleshoot-plugins | Nov 30, 2017 | Apr 11, 2017 |
| Oracle_linux | — | Upgrade setroubleshoot-pluginsUpgrade setroubleshoot-docUpgrade setroubleshoot-serverUpgrade setroubleshoot | Jun 21, 2016 | Jun 21, 2016 |
| Redhat_linux | — | Upgrade setroubleshoot-debuginfoUpgrade setroubleshootUpgrade setroubleshoot-serverUpgrade setroubleshoot-pluginsUpgrade setroubleshoot-doc | Jul 30, 2016 | Jun 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub