Описание
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Отчет
This vulnerability is rated as Moderate impact because exploitation is restricted to local unprivileged users and requires an active desktop PolicyKit configuration to alter runtime firewall rules. Standard server environments remain largely unaffected unless configured with desktop authorization profiles that relax permissions for active local sessions. While an attacker can tamper with active packet filtering policies without administrative credentials, the flaw does not facilitate direct privilege escalation or permanent configuration changes.
Меры по смягчению последствий
To mitigate this issue, ensure that the firewalld desktop policy is not active on systems where local unprivileged user access is a concern. If firewalld is not required, it can be disabled. Disabling firewalld may impact network services that rely on it. To disable firewalld: sudo systemctl stop firewalld sudo systemctl disable firewalld A system restart or service reload may be required for changes to take full effect.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | firewalld | Fix deferred | ||
| Red Hat Enterprise Linux 8 | firewalld | Fix deferred | ||
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-8 | Fix deferred | ||
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-9 | Under investigation | ||
| Red Hat Enterprise Linux 10 | firewalld | Fixed | RHBA-2026:28238 | 23.06.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | firewalld | Fixed | RHSA-2026:67843 | 16.09.2026 |
| Red Hat Enterprise Linux 9 | firewalld | Fixed | RHSA-2026:67585 | 15.09.2026 |
| Red Hat Enterprise Linux 9 | firewalld | Fixed | RHSA-2026:67585 | 15.09.2026 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | firewalld | Fixed | RHSA-2026:76844 | 06.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A flaw was found in firewalld. A local unprivileged user can exploit t ...
EPSS
5.5 Medium
CVSS3