medium5.5
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removeP…
Impact
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Firewalld | Firewalld | through 0.4.3.2 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Hpc Node | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-2597.html
- http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release
- http://www.openwall.com/lists/oss-security/2016/08/16/3
- http://www.securityfocus.com/bid/92481
- https://bugzilla.redhat.com/show_bug.cgi?id=1360135
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/
- https://security.gentoo.org/glsa/201701-70
- http://rhn.redhat.com/errata/RHSA-2016-2597.html
- http://www.firewalld.org/2016/08/firewalld-0-4-3-3-release
- http://www.openwall.com/lists/oss-security/2016/08/16/3
- http://www.securityfocus.com/bid/92481
- https://bugzilla.redhat.com/show_bug.cgi?id=1360135
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/
- https://security.gentoo.org/glsa/201701-70