CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 30.3%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 2.1

References

Products affected by CVE-2016-5410

Firewalld » Firewalld » Version: 0.3.14

cpe:2.3:a:firewalld:firewalld:0.3.14
Firewalld » Firewalld » Version: 0.3.14.1

cpe:2.3:a:firewalld:firewalld:0.3.14.1
Firewalld » Firewalld » Version: 0.3.14.2

cpe:2.3:a:firewalld:firewalld:0.3.14.2
Firewalld » Firewalld » Version: 0.4.0

cpe:2.3:a:firewalld:firewalld:0.4.0
Firewalld » Firewalld » Version: 0.4.1.2

cpe:2.3:a:firewalld:firewalld:0.4.1.2
Firewalld » Firewalld » Version: 0.4.2

cpe:2.3:a:firewalld:firewalld:0.4.2
Firewalld » Firewalld » Version: 0.4.3

cpe:2.3:a:firewalld:firewalld:0.4.3
Firewalld » Firewalld » Version: 0.4.3.1

cpe:2.3:a:firewalld:firewalld:0.4.3.1
Firewalld » Firewalld » Version: 0.4.3.2

cpe:2.3:a:firewalld:firewalld:0.4.3.2
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Hpc Node » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5410

Products

Pricing

Contact Us