CVE-2016-7545
Fixed in a distro release EPSS <1%
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
Products: selinux_project selinux, fedoraproject fedora, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | policycoreutils | 2.5-3 |
| Debian 13 | policycoreutils | 2.5-3 |
| Debian 14 | policycoreutils | 2.5-3 |
| Debian 7 | policycoreutils | 2.1.10-9+deb7u1 |
| Red Hat Enterprise Linux 6 | policycoreutils | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 6 | policycoreutils-debuginfo | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 6 | policycoreutils-gui | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 6 | policycoreutils-newrole | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 6 | policycoreutils-python | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 6 | policycoreutils-sandbox | 0:2.0.83-30.1.el6_8 |
| Red Hat Enterprise Linux 7 | policycoreutils | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-debuginfo | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-devel | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-gui | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-newrole | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-python | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-restorecond | 0:2.5-9.el7 |
| Red Hat Enterprise Linux 7 | policycoreutils-sandbox | 0:2.5-9.el7 |
| Red Hat rhel eus 7.1 | policycoreutils | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-debuginfo | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-debuginfo | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-devel | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-devel | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-gui | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-gui | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-newrole | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-newrole | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-python | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-python | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-restorecond | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-restorecond | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.1 | policycoreutils-sandbox | 0:2.2.5-16.ael7b_1 |
| Red Hat rhel eus 7.1 | policycoreutils-sandbox | 0:2.2.5-16.el7_1 |
| Red Hat rhel eus 7.2 | policycoreutils | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-debuginfo | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-devel | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-gui | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-newrole | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-python | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-restorecond | 0:2.2.5-21.el7_2 |
| Red Hat rhel eus 7.2 | policycoreutils-sandbox | 0:2.2.5-21.el7_2 |
| SUSE Linux Enterprise Server 11 SP4 | policycoreutils | 2.0.79-4.8.1 |
| SUSE Linux Enterprise Server 12 SP1 | policycoreutils | 2.3-3.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | policycoreutils | 2.5-6.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | policycoreutils | 2.5-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | policycoreutils | 2.0.79-4.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | policycoreutils | 2.3-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | policycoreutils | 2.5-6.1 |
| openSUSE Tumbleweed | coreutils | 3.2-1.4 |
| openSUSE Tumbleweed | firejail | 0.9.66-1.2 |