CVE-2016-5410

Опубликовано: 19 апр. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.

Ссылки

http://rhn.redhat.com/errata/RHSA-2016-2597.html
Third Party Advisory
http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/08/16/3
Mailing List
http://www.securityfocus.com/bid/92481
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1360135
Issue Tracking
Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/
https://security.gentoo.org/glsa/201701-70
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2597.html
Third Party Advisory
http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/08/16/3
Mailing List
http://www.securityfocus.com/bid/92481
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1360135
Issue Tracking
Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/
https://security.gentoo.org/glsa/201701-70
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:firewalld:firewalld:*:*:*:*:*:*:*:*

Версия до 0.4.3.2 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.0006

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2016-5410

CVSS3: 5.5

ubuntu

больше 8 лет назад

CVE-2016-5410

CVSS3: 6.1

redhat

около 9 лет назад

CVE-2016-5410

CVSS3: 5.5

debian

больше 8 лет назад

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass ...

GHSA-v2vf-88f9-4px7

CVSS3: 5.5

github

больше 3 лет назад

ELSA-2016-2597

oracle-oval

почти 9 лет назад

ELSA-2016-2597: firewalld security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 19%

0.0006

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-287