CVE:CVE-2015-1815
CNNVD:CNNVD-201503-630
Fedora是Fedora社区的一套Linux操作系统。
Fedora 存在命令注入漏洞。该漏洞源于setroubleshootsetroubleshoot中util.py的get_rpm_nvr_by_file_path_temporary函数允许远程攻击者借助文件名中的shell元字符执行任意命令。
solution:Upgrade selinux setroubleshoot to a higher version than 3.2.21,and avoid the version (,3.2.21]; Upgrade fedoraproject fedora to a higher version than 22,and avoid the version 22