CVE-2016-4989
Summary
by MITRE
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 11/28/2022
Xxx Xxx-xxxx-xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxx Xxxxxxxxxxxxxx Xxxx, X Xxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxxxxx Xxxxxxxx Xxx Xxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx. Xxxx Xxxx Xxxxxx Xx Xx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxx Xxxx Xxx Xxxx-xxxxxxxx Xxxxxxxxxxxxxxx Xxxxxxxx, Xxxxxx Xx Xx Xxxxxxxxx Xxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxx X Xxxxxxxxxxx Xxxxxx Xx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxx Xxxxxxxxxxx Xx Xxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxx. Xxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxx Xxxxxx Xxxxxxx Xxxx Xxx Xxxxxxxxxx Xxxxxxxx Xxx Xxxx Xxxxxxxxxx Xxxxx Xx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxx'x Xxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxxx Xxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxx Xxxxxx Xxxxxxxxxxxxxx'x Xxxxxxxxxxxx. Xxx Xxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxx X Xxxxxxx Xxxxxxxx Xxxx Xxxx Xxxxxxxxx Xx Xxx _xxx_xxxxx Xxxxxxxx Xxxxxxx Xx Xxxxx_xxxx.xx. Xxxx Xxxxxxxx Xxxxxxx Xxxx Xxxxxxxxxxxxxxx Xxxx Xxx Xxxxxxxx Xxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxx. Xxx Xxxxxx Xxx Xxxxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxx_xx Xxx Xxxxxxxx_xx Xxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxx Xxx Xxxxxxxxx Xx Xxx Xxx_xxx Xxxxxxxx Xx Xxxxxxxxxxxxxxxxxxx.xx. Xxx Xxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxx Xxx Xx Xxxxxxxxxx.xxxxx_xxxxxx Xxx Xxxxxxxx.xxxxxxxxxxxxxxx Xxxxxxxxx, Xxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxxx Xxxx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx. Xxxx Xxxxxxxxxx X Xxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxx Xxxxxxxx-xxxxxxxxxx Xxxx Xx Xxxxxx Xxxxxxxx Xx Xxxxxx-xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxxxx, Xx Xx Xxxxxx Xxxxx Xxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxx Xxxxxxxxxxxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxx Xxxxxxxxx. Xxxx Xxxxxxxxx, Xxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxxxxxxxxxxxxx Xxxxxxx, Xxxxx Xxxxxxxxx Xxxx Xxxx Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxx Xxx Xxxxxx Xxxxxxx Xxxxxxxx. Xxxx Xxxxxxx X Xxxxxxxxx Xxxxxxx Xxx Xxxxxxxxx Xx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxx Xxxx Xxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxx X Xxxxxxxxxxxxx Xxxxxxxxxxx, Xxxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxx Xxxx Xxx Xxxxx Xx Xxxxxxx Xxxxxx Xxxxxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xx Xxx Xxxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxx Xxxxxx Xxxxxxxxxxx, Xxxxxx Xx Xxxxxxxxx Xx Xxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxx.
Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx-xx, Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx Xx Xxxxxxx Xxxxxxxxx Xxxxxxx, Xxx Xxxxxxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xxxxx Xxxxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx. Xxx Xxxxxx Xxxxxxx Xxxx Xxx Xx Xxxxxxx Xxx&xx Xxxxxxxxxx Xxxxxxxxx Xxxxx Xxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxx Xxxxx Xxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxx Xxxxxxxx Xxxxx Xxxxxx Xxxxxx Xxx Xxxx Xxx Xxxx Xxxxxxx Xxxxxxxxxxxx, Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxxxxxxx Xxxxx Xxxxx Xxxxxxxxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxxxx. Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx, Xxxxxxxxxxxx Xxxxxx Xxx Xxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxx. Xxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx, Xxxxx Xxxxx Xxxxxxxxxxxx Xx Xxxxxxxx.xxxxxxxxxxxxxxx Xxx Xxxxxxxxxx.xxxxx_xxxxxx, Xxx Xxxxxxxx Xxxx Xxx Xxxx-xxxxxxxx Xxxx Xx Xxxxxxxx Xxxxxxx Xxxxxx Xxxxx Xxxxxx Xx Xxxxxx-xxxxx Xxxxxxxxx. Xxxxxxxxxxxx, Xxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxxxxx Xxxxxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxx Xxxxxx Xxxxxxxx Xx Xxxxx Xxx Xxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx.