Xxe

2017-04-1118:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function.

CPENameOperatorVersion
enterprise_linux_desktopeq7.0
enterprise_linux_hpc_nodeeq7.0
enterprise_linux_servereq7.0
enterprise_linux_workstationeq7.0
setroubleshootle3.2.22