CVE-2016-5410
Fixed in a distro release EPSS <1%
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
Products: firewalld, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | firewalld | 0.4.3.3-1 |
| Debian 13 | firewalld | 0.4.3.3-1 |
| Debian 14 | firewalld | 0.4.3.3-1 |
| Red Hat Enterprise Linux 7 | firewall-applet | 0:0.4.3.2-8.el7 |
| Red Hat Enterprise Linux 7 | firewall-config | 0:0.4.3.2-8.el7 |
| Red Hat Enterprise Linux 7 | firewalld | 0:0.4.3.2-8.el7 |
| Red Hat Enterprise Linux 7 | firewalld-filesystem | 0:0.4.3.2-8.el7 |
| Red Hat Enterprise Linux 7 | python-firewall | 0:0.4.3.2-8.el7 |
| Ubuntu 16.04 LTS | firewalld | 0.4.0-1ubuntu0.1 |
| openSUSE Tumbleweed | firewalld | 0.4.4.2-1.1 |