AZL-85335

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85335.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-85335

Upstream

CVE-2026-4948

Published

2026-03-27T06:16:39Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4

Details

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-4948

Affected packages

Azure Linux:3 / firewalld

Package

Name: firewalld
Purl: pkg:rpm/azure-linux/firewalld

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.2-4

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85335.json"