Base Score

HIGH8.8

CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

VectorLOCAL

Published Bycve@mitre.org

Published DateJan 19, 2017, 20:59

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://rhn.redhat.com/errata/RHSA-2016-2702.html
http://rhn.redhat.com/errata/RHSA-2017-0535.html
http://rhn.redhat.com/errata/RHSA-2017-0536.html
http://www.openwall.com/lists/oss-security/2016/09/25/1
http://www.securityfocus.com/bid/93156
http://www.securitytracker.com/id/1037283
https://github.com/SELinuxProject/selinux/commit/acca96a135a4d2a028ba9b636886af99c0915379
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPRNK3PWMAVNJZ53YW5GOEOGJSFNAQIF/
https://marc.info/?l=selinux&m=147465160112766&w=2

Base Score

HIGH8.8

Weakness Type (CWE):CWE-284

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH