CVE-2016-7545
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-7545
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7545.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-7545
- Related
- Published
- 2017-01-19T20:59:00Z
- Modified
- 2024-09-18T02:34:14.315793Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
- References
-
- http://rhn.redhat.com/errata/RHSA-2016-2702.html
- http://rhn.redhat.com/errata/RHSA-2017-0535.html
- http://rhn.redhat.com/errata/RHSA-2017-0536.html
- http://www.securityfocus.com/bid/93156
- http://www.openwall.com/lists/oss-security/2016/09/25/1
- https://github.com/SELinuxProject/selinux/commit/acca96a135a4d2a028ba9b636886af99c0915379
- http://www.securitytracker.com/id/1037283
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPRNK3PWMAVNJZ53YW5GOEOGJSFNAQIF/
- https://marc.info/?l=selinux&m=147465160112766&w=2
- https://security-tracker.debian.org/tracker/CVE-2016-7545
Affected packages
Debian:11 / policycoreutils
Package
- Name
- policycoreutils
- Purl
- pkg:deb/debian/policycoreutils?arch=source
Debian:12 / policycoreutils
Package
- Name
- policycoreutils
- Purl
- pkg:deb/debian/policycoreutils?arch=source
Debian:13 / policycoreutils
Package
- Name
- policycoreutils
- Purl
- pkg:deb/debian/policycoreutils?arch=source
Git / github.com/selinuxproject/selinux
Affected ranges
- Type
- GIT
- Repo
- https://github.com/selinuxproject/selinux
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
20080909
20090403
20090731
20091123
20100525
20101221
20110727
20120216
20120924
20130423
20131030
20131030_1
20131030_2
20131030_3
20131030_4
20140506
20140826-rc1
20140826-rc2
20140826-rc3
20140826-rc4
20140826-rc5
20140826-rc6
20140826-rc7
20150202
20160107
20160223
checkpolicy-2.*
checkpolicy-2.2
checkpolicy-2.3
checkpolicy-2.3-rc1
checkpolicy-2.4
checkpolicy-2.4-rc3
checkpolicy-2.4-rc4
checkpolicy-2.4-rc5
checkpolicy-2.4-rc6
checkpolicy-2.4-rc7
checkpolicy-2.5
checkpolicy-2.5-rc1
libselinux-2.*
libselinux-2.2
libselinux-2.2.1
libselinux-2.2.2
libselinux-2.3
libselinux-2.3-rc1
libselinux-2.4
libselinux-2.4-rc2
libselinux-2.4-rc3
libselinux-2.4-rc4
libselinux-2.4-rc5
libselinux-2.4-rc6
libselinux-2.4-rc7
libselinux-2.5
libselinux-2.5-rc1
libsemanage-2.*
libsemanage-2.2
libsemanage-2.3
libsemanage-2.3-rc1
libsemanage-2.4
libsemanage-2.4-rc2
libsemanage-2.4-rc3
libsemanage-2.4-rc4
libsemanage-2.4-rc5
libsemanage-2.4-rc6
libsemanage-2.4-rc7
libsemanage-2.5
libsemanage-2.5-rc1
libsepol-2.*
libsepol-2.2
libsepol-2.3
libsepol-2.3-rc1
libsepol-2.4
libsepol-2.4-rc2
libsepol-2.4-rc3
libsepol-2.4-rc4
libsepol-2.4-rc5
libsepol-2.4-rc6
libsepol-2.4-rc7
libsepol-2.5
libsepol-2.5-rc1
policycoreutils-2.*
policycoreutils-2.2
policycoreutils-2.2.1
policycoreutils-2.2.2
policycoreutils-2.2.3
policycoreutils-2.2.4
policycoreutils-2.2.5
policycoreutils-2.3
policycoreutils-2.3-rc1
policycoreutils-2.4
policycoreutils-2.4-rc2
policycoreutils-2.4-rc3
policycoreutils-2.4-rc4
policycoreutils-2.4-rc5
policycoreutils-2.4-rc6
policycoreutils-2.4-rc7
policycoreutils-2.5
policycoreutils-2.5-rc1
secilc-2.*
secilc-2.5
secilc-2.5-rc1
sepolgen-1.*
sepolgen-1.2
sepolgen-1.2.1
sepolgen-1.2.2
sepolgen-1.2.2-rc2
sepolgen-1.2.2-rc3
sepolgen-1.2.2-rc4
sepolgen-1.2.2-rc5
sepolgen-1.2.2-rc6
sepolgen-1.2.2-rc7
sepolgen-1.2.3
sepolgen-1.2.3-rc1