CVE:CVE-2016-4989
CNNVD:CNNVD-201606-494
setroubleshoot是一套用于SELinux操作系统中的故障排除工具。该工具由框架和分析插件组成。
setroubleshoot中存在安全漏洞。本地攻击者可利用该漏洞绕过container保护机制，执行任意命令。
solution:Upgrade setroubleshoot_project setroubleshoot to a higher version than -,and avoid the version (,-]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0