This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-5410 →

DEBIAN-CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2...

Original description

The description as published by the source.

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 firewalld

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3.3-1"}]}]

Debian:13 firewalld

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3.3-1"}]}]

Debian:14 firewalld

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3.3-1"}]}]

References

advisory security-tracker.debian.org