SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade policycoreutils | Nov 11, 2016 | Nov 10, 2016 |
| Centos_linux | — | Upgrade policycoreutils-newroleUpgrade policycoreutilsUpgrade policycoreutils-debuginfoUpgrade policycoreutils-restorecondUpgrade policycoreutils-sandboxUpgrade policycoreutils-guiUpgrade policycoreutils-develUpgrade policycoreutils-python | Jan 27, 2017 | Nov 19, 2016 |
| Debian | — | Upgrade policycoreutils | Mar 31, 2017 | Sep 25, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade policycoreutils-develUpgrade policycoreutils-guiUpgrade policycoreutils-pythonUpgrade policycoreutils-newroleUpgrade policycoreutils-sandboxUpgrade policycoreutils | Nov 30, 2017 | Jan 19, 2017 |
| Oracle_linux | — | Upgrade policycoreutils-restorecondUpgrade policycoreutils-newroleUpgrade policycoreutils-develUpgrade policycoreutils-guiUpgrade policycoreutils-sandboxUpgrade policycoreutilsUpgrade policycoreutils-python | Nov 14, 2016 | Sep 22, 2016 |
| Redhat_linux | — | Upgrade policycoreutils-develUpgrade policycoreutils-newroleUpgrade policycoreutils-restorecondUpgrade policycoreutils-guiUpgrade policycoreutils-debuginfoUpgrade policycoreutilsUpgrade policycoreutils-pythonUpgrade policycoreutils-sandbox | Jan 19, 2017 | Jan 19, 2017 |
| Suse | — | Upgrade policycoreutils-newroleUpgrade policycoreutils-pythonUpgrade policycoreutils-langUpgrade policycoreutils-develUpgrade policycoreutilsUpgrade python3-policycoreutils | Feb 1, 2017 | Jan 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub