Lucene search
Veracode Vulnerability DatabaseVERACODE:17016HistoryMay 02, 2019 - 5:34 a.m.
Arbitrary Command Execution
2019-05-0205:34:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
5.1%
setroubleshoot is vulnerable to arbitrary command execution. The vulnerability exists through the fix_lookup_id function.
References
seclists.org/oss-sec/2016/q2/575
www.securityfocus.com/bid/91430
www.securitytracker.com/id/1036144
access.redhat.com/errata/RHSA-2016:1267
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1339183
github.com/fedora-selinux/setroubleshoot/commit/2d12677629ca319310f6263688bb1b7f676c01b7
rhn.redhat.com/errata/RHSA-2016-1267.html
Related
prion
prion
Xxe
2017-04-11 18:59:00
Design/Logic Flaw
2017-04-11 18:59:00
osv
osv
CVE-2016-4445
2017-04-11 18:59:00
CVE-2016-4989
2017-04-11 18:59:00
redhatcve
redhatcve
CVE-2016-4445
2016-06-21 11:48:46
cvelist
cvelist
CVE-2016-4445
2017-04-11 18:00:00
CVE-2016-4989
2017-04-11 18:00:00
cve
cve
CVE-2016-4445
2017-04-11 18:59:00
CVE-2016-4989
2017-04-11 18:59:00
nvd
nvd
CVE-2016-4445
2017-04-11 18:59:00
CVE-2016-4989
2017-04-11 18:59:00
nessus
nessus
redhat
redhat
openvas
openvas
CentOS Update for setroubleshoot CESA-2016:1267 centos6
2016-06-22 00:00:00
CentOS Update for setroubleshoot-plugins CESA-2016:1267 centos6
2016-06-22 00:00:00
centos
centos
setroubleshoot security update
2016-06-21 19:07:23
f5
f5
oraclelinux
oraclelinux
setroubleshoot and setroubleshoot-plugins security update
2016-06-21 00:00:00