RCE in Selinux Setroubleshoot
CVE-2015-1815
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.165 (96.9th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.165 · newest: 0.165 · change: 0.000
Affected products
- Selinux Setroubleshoot
- Fedoraproject Fedora — versions 22
Weakness classification (CWE)
Public proof-of-concept exploits
References
- lists.fedoraproject.org/pipermail/package-announce/2015-April/154427.html (vendor-advisory)
- www.securityfocus.com/bid/73374 (vdb-entry)
- www.exploit-db.com/exploits/36564/ (exploit)
- lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html (vendor-advisory)
- www.openwall.com/lists/oss-security/2015/03/26/1 (mailing-list, Exploit)
- bugzilla.redhat.com/show_bug.cgi (Exploit)
- lists.fedoraproject.org/pipermail/package-announce/2015-March/154147.html (vendor-advisory)
- rhn.redhat.com/errata/RHSA-2015-0729.html (vendor-advisory)
- www.osvdb.org/119966 (vdb-entry)
- github.com/stealth/troubleshooter (Exploit)
Frequently asked questions
- What is CVE-2015-1815?
- CVE-2015-1815 is a vulnerability in Selinux Setroubleshoot, classified under Command Injection. Published 2015-03-30.
- Is CVE-2015-1815 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.