Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2016-7545

Published: 19/01/2017 Updated: 07/11/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Selinux

Vulnerability Summary

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

selinux project selinux -

fedoraproject fedora 25

redhat enterprise linux desktop 7.0

redhat enterprise linux workstation 7.0

redhat enterprise linux server 7.0

redhat enterprise linux hpc node 6.0

redhat enterprise linux hpc node 7.0

redhat enterprise linux desktop 6.0

redhat enterprise linux server 6.0

redhat enterprise linux workstation 6.0

redhat enterprise linux server tus 7.3

Vendor Advisories

Red Hat: Important: policycoreutils security update
Synopsis Important: policycoreutils security update Type/Severity Security Advisory: Important Topic An update for policycoreutils is now available for Red Hat Enterprise Linux 72 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...
Red Hat: Important: policycoreutils security update
Synopsis Important: policycoreutils security update Type/Severity Security Advisory: Important Topic An update for policycoreutils is now available for Red Hat Enterprise Linux 71 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulne ...
Red Hat: Important: policycoreutils security update
Synopsis Important: policycoreutils security update Type/Severity Security Advisory: Important Topic An update for policycoreutils is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common ...
Debian CVElist Bug Report Logs: CVE-2017-5226 -- bubblewrap escape
Debian Bug report logs - #850702 CVE-2017-5226 -- bubblewrap escape Package: bubblewrap; Maintainer for bubblewrap is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Source for bubblewrap is src:bubblewrap (PTS, buildd, popcon) Reported by: up201407890@alunosdccfcuppt Date: Mon, 9 Jan 2017 13 ...
Debian CVElist Bug Report Logs: policycoreutils: CVE-2016-7545: SELinux sandbox escape via TIOCSTI ioctl
Debian Bug report logs - #838599 policycoreutils: CVE-2016-7545: SELinux sandbox escape via TIOCSTI ioctl Package: policycoreutils; Maintainer for policycoreutils is Debian SELinux maintainers <selinux-devel@listsaliothdebianorg>; Source for policycoreutils is src:policycoreutils (PTS, buildd, popcon) Reported by: up20140 ...
Amazon Linux AMI: ALAS-2016-765
It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent bash, escaping the sandbox ...
Red Hat: CVE-2016-7545
It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent shell, escaping the sandbox ...

Github Repositories

https://github.com/enterprisemodules/vulnerability_demo

Demo showing how to use the vulnerability module

Demo Puppet vulnerability management We will show you how you can integrate vulnerability scanning and remediation into your Puppet workflow in this demo You can use this demo with Puppet Enterprise or start the nodes masterless to view how it works quickly Scanning vulnerabilities After starting the modes (see following paragraphs), you can log in to the system: $ vagrant ss

References

CWE-284https://marc.info/?l=selinux&m=147465160112766&w=2https://github.com/SELinuxProject/selinux/commit/acca96a135a4d2a028ba9b636886af99c0915379http://www.securityfocus.com/bid/93156http://www.openwall.com/lists/oss-security/2016/09/25/1http://rhn.redhat.com/errata/RHSA-2016-2702.htmlhttp://www.securitytracker.com/id/1037283http://rhn.redhat.com/errata/RHSA-2017-0536.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0535.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPRNK3PWMAVNJZ53YW5GOEOGJSFNAQIF/https://access.redhat.com/errata/RHSA-2017:0535https://nvd.nist.govhttps://github.com/enterprisemodules/vulnerability_demohttps://alas.aws.amazon.com/ALAS-2016-765.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code executionCVE-2024-34909CVE-2024-3317SSTICVE-2024-3400CVE-2024-30051wirelessCVE-2024-4622CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook