Security fix for CVE-2016-4446

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the setroubleshoot, setroubleshoot-plugins packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The setroubleshoot packages provide tools to help     diagnose SELinux problems. When Access Vector Cache     (AVC) messages are returned, an alert can be generated     that provides information about the problem and helps     to track its resolution.

  - The setroubleshoot-plugins package provides a set of     analysis plugins for use with setroubleshoot. Each     plugin has the capacity to analyze SELinux AVC data and     system data to provide user friendly reports describing     how to interpret SELinux AVC denials.

  - Security Fix(es)i1/4s

  - Shell command injection flaws were found in the way the     setroubleshoot executed external commands. A local     attacker able to trigger certain SELinux denials could     use these flaws to execute arbitrary code with     privileges of the setroubleshoot user.(CVE-2016-4989)

  - Shell command injection flaws were found in the way the     setroubleshoot allow_execmod and allow_execstack     plugins executed external commands. A local attacker     able to trigger an execmod or execstack SELinux denial     could use these flaws to execute arbitrary code with     privileges of the setroubleshoot user.
    (CVE-2016-4444,CVE-2016-4446)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for setroubleshoot and setroubleshoot-plugins is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache (AVC) messages are returned, an alert can be generated that provides information about the problem and helps to track its resolution.

The setroubleshoot-plugins package provides a set of analysis plugins for use with setroubleshoot. Each plugin has the capacity to analyze SELinux AVC data and system data to provide user friendly reports describing how to interpret SELinux AVC denials.

Security Fix(es) :

* Shell command injection flaws were found in the way the setroubleshoot executed external commands. A local attacker able to trigger certain SELinux denials could use these flaws to execute arbitrary code with root privileges. (CVE-2016-4445, CVE-2016-4989)

* Shell command injection flaws were found in the way the setroubleshoot allow_execmod and allow_execstack plugins executed external commands. A local attacker able to trigger an execmod or execstack SELinux denial could use these flaws to execute arbitrary code with root privileges. (CVE-2016-4444, CVE-2016-4446)

The CVE-2016-4444 and CVE-2016-4446 issues were discovered by Milos Malik (Red Hat) and the CVE-2016-4445 and CVE-2016-4989 issues were discovered by Red Hat Product Security.

The setroubleshoot-plugins package provides a set of analysis plugins for use with setroubleshoot. Each plugin has the capacity to analyze SELinux AVC data and system data to provide user friendly reports describing how to interpret SELinux AVC denials.

Security Fix(es) :

  - Shell command injection flaws were found in the way the     setroubleshoot executed external commands. A local     attacker able to trigger certain SELinux denials could     use these flaws to execute arbitrary code with root     privileges. (CVE-2016-4445, CVE-2016-4989)

  - Shell command injection flaws were found in the way the     setroubleshoot allow_execmod and allow_execstack plugins     executed external commands. A local attacker able to     trigger an execmod or execstack SELinux denial could use     these flaws to execute arbitrary code with root     privileges. (CVE-2016-4444, CVE-2016-4446)

The CVE-2016-4444 and CVE-2016-4446 issues were discovered by Milos Malik (Red Hat) and the CVE-2016-4445 and CVE-2016-4989 issues were discovered by Red Hat Product Security.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-543:01 advisory.

    setroubleshoot     setroubleshoot GUI. Application that allows you to view setroubleshoot-server     messages.
    Provides tools to help diagnose SELinux problems. When AVC messages     are generated an alert can be generated that will give information     about the problem and help track its resolution. Alerts can be configured     to user preference. The same tools can be run on existing log files.
    setroubleshoot-plugins     This package provides a set of analysis plugins for use with     setroubleshoot. Each plugin has the capacity to analyze SELinux AVC     data and system data to provide user friendly reports describing how     to interpret SELinux AVC denials.
    Security issues fixed with this release:
    CVE-2016-4444
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-4445
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-4446
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-4989
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for setroubleshoot and setroubleshoot-plugins is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache (AVC) messages are returned, an alert can be generated that provides information about the problem and helps to track its resolution.

The setroubleshoot-plugins package provides a set of analysis plugins for use with setroubleshoot. Each plugin has the capacity to analyze SELinux AVC data and system data to provide user friendly reports describing how to interpret SELinux AVC denials.

Security Fix(es) :

* Shell command injection flaws were found in the way the setroubleshoot executed external commands. A local attacker able to trigger certain SELinux denials could use these flaws to execute arbitrary code with privileges of the setroubleshoot user.
(CVE-2016-4989)

* Shell command injection flaws were found in the way the setroubleshoot allow_execmod and allow_execstack plugins executed external commands. A local attacker able to trigger an execmod or execstack SELinux denial could use these flaws to execute arbitrary code with privileges of the setroubleshoot user. (CVE-2016-4444, CVE-2016-4446)

The CVE-2016-4444 and CVE-2016-4446 issues were discovered by Milos Malik (Red Hat) and the CVE-2016-4989 issue was discovered by Red Hat Product Security.

Note: On Red Hat Enterprise Linux 7.0 and 7.1, the setroubleshoot is run with root privileges. Therefore, these issues could allow an attacker to execute arbitrary code with root privileges.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1293 advisory.

    setroubleshoot     [3.2.24-4.0.1]
    - Add setroubleshoot-oracle-enterprise.patch to change bug reporting       URL to linux.oracle.com

    [3.2.24-4]
    - Catch all subprocess module exceptions

    [3.2.24-3]
    - Use subprocess.check_output() with a sequence of program arguments

    [3.2.24-2]
    - Do not use dangerous shell=True

    setroubleshoot-plugins     [3.0.59-2.0.1]
    - Add setroubleshoot-plugins-oracle-config.patch to use oracle url
    - Add setroubleshoot-plugins-oracle-po.patch to use oracle url for po

    [3.0.59-2]
    - Don't use commands.get*output()     Resolves: CVE-2016-4444, CVE-2016-4446

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92286	Fedora 23 : setroubleshoot-plugins (2016-b68f69b086)	Nessus	Fedora Local Security Checks	2016/7/15	2026/2/2	high
92303	Fedora 23 : setroubleshoot (2016-f2493c754a)	Nessus	Fedora Local Security Checks	2016/7/15	2026/2/2	high
92304	Fedora 22 : setroubleshoot (2016-f597359bf2)	Nessus	Fedora Local Security Checks	2016/7/15	2026/2/2	high
99796	EulerOS 2.0 SP1 : setroubleshoot, setroubleshoot-plugins (EulerOS-SA-2016-1033)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	high
91732	CentOS 6 : setroubleshoot / setroubleshoot-plugins (CESA-2016:1267)	Nessus	CentOS Local Security Checks	2016/6/22	2025/2/18	high
91806	Scientific Linux Security Update : setroubleshoot and setroubleshoot-plugins on SL6.x i386/x86_64 (20160621)	Nessus	Scientific Linux Local Security Checks	2016/6/24	2021/1/14	high
289818	MiracleLinux 4 : setroubleshoot-plugins-3.0.40-3.1.0.1.AXS4, setroubleshoot-3.0.47-12.0.1.AXS4 (AXSA:2016-543:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
92111	Fedora 24 : setroubleshoot-plugins (2016-75ca94dee3)	Nessus	Fedora Local Security Checks	2016/7/14	2026/2/2	high
91757	RHEL 6 : setroubleshoot and setroubleshoot-plugins (RHSA-2016:1267)	Nessus	Red Hat Local Security Checks	2016/6/22	2019/10/24	high
91787	CentOS 7 : setroubleshoot / setroubleshoot-plugins (CESA-2016:1293)	Nessus	CentOS Local Security Checks	2016/6/24	2025/2/18	high
91798	Oracle Linux 7 : setroubleshoot / and / setroubleshoot-plugins (ELSA-2016-1293)	Nessus	Oracle Linux Local Security Checks	2016/6/24	2025/2/18	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high