CVE-2021-36084
Fixed in a distro release EPSS <1%
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).
Products: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510, Siemens RUGGEDCOM ROX RX1511, Siemens RUGGEDCOM ROX RX1512, Siemens RUGGEDCOM ROX RX1524, Siemens RUGGEDCOM ROX RX1536, Siemens RUGGEDCOM ROX RX5000
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libsepol | 2.9-3.el8 |
| AlmaLinux 8 | libsepol-devel | 2.9-3.el8 |
| AlmaLinux 8 | libsepol-static | 2.9-3.el8 |
| Debian 11 | libsepol | 3.1-1+deb11u1 |
| Debian 12 | libsepol | 3.3-1 |
| Debian 13 | libsepol | 3.3-1 |
| Debian 14 | libsepol | 3.3-1 |
| Red Hat Enterprise Linux 8 | libsepol | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-debuginfo | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-debugsource | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-devel | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-static | 0:2.9-3.el8 |
| Rocky Linux 8 | libsepol | 0:2.9-3.el8 |
| Ubuntu 18.04 LTS | libsepol | 2.7-1ubuntu0.1 |
| Ubuntu 20.04 LTS | libsepol | 3.0-1ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | libsepol | 2.4-2ubuntu0.1~esm1 |