Detections
Analytics

Fedora 25 : firewalld (2016-4dedc6ec3d)

medium Nessus Plugin ID 94803

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

- Fix CVE-2016-5410: Firewall configuration can be modified by any logged in user

 - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO

 - Update AppData configuration file.

 - tests/firewalld_rich.py: Use new import structure and FirewallClient classes

 - tests/firewalld_direct.py: Use new import structure

 - tests: firewalld_direct: Fix assert to check for True instead of False

 - tests: firewalld_config: Fix expected value when querying the zone target

 - tests: firewalld_config: Use real nf_conntrack modules

 - firewalld.spec: Added comment about make call for %build

 - firewall-config: Use also width_request and height_request with default size

 - Updated firewall-config screenshot

 - firewall-cmd: Fixed typo in help output (RHBZ#1367171)

 - test-suite: Ignore stderr to get default zone also for missing firewalld.conf

 - firewall.core.logger: Warnings should be printed to stderr per default

 - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails

 - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired

 - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired

 - test-suite: Do not fail on ALREADY_ENABLED
 --add-destination tests

 - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings

 - doc/xml/firewalld.dbus.xml: Removed undefined reference

 - doc/xml/transform-html.xsl.in: Fixed references in the document

 - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para

 - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page

 - firewall: core: fw_nm: Instantiate the NM client only once

 - firewall/core/io/*.py: Do not traceback on a general sax parsing issue

 - firewall-offline-cmd: Fix
 --{add,remove}-entries-from-file

 - firewall-cmd: Add missing action to fix
 --{add,remove}-entries-from-file

 - firewall.core.prog: Do not output stderr, but return it in the error case

 - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)

 - config/firewall.service.in: use KillMode=mixed

 - config/firewalld.service.in: use network-pre.target

 - firewall-config: Add missing gettext.textdomain call to fix translations

 - Add UDP to transmission-client.xml service

 - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings

 - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls

 - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls

 - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination calls

 - firewall.command: Add the removed FirewallError handling to the action (a17ce50)

 - firewall.command: Do not use query methods for sequences and also single options

 - Add missing information about MAC and ipset sources to man pages and help output

 - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages

 - firewall[-offline]-cmd, firewallctl, firewall.command:
 Use sys.{stdout,stderr}

 - firewallctl: Fix traceback if not connected to firewalld

 - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked

 - firewall.command: Convert errors to string for Python3

 - firewall.command: Get proper firewall error code from D-BusExceptions

 - firewall-cmd: Fixed traceback without args

 - Add missing service files to Makefile.am

 - shell-completion: Add shell completion support for

 --{get,set}--{description,short}

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected firewalld package.

See Also

https://bodhi.fedoraproject.org/updates/FEDORA-2016-4dedc6ec3d

Plugin Details

Severity: Medium

ID: 94803

File Name: fedora_2016-4dedc6ec3d.nasl

Version: 2.7

Type: local

Agent: unix

Published: 11/15/2016

Updated: 1/11/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Vulnerability Information

CPE: cpe:/o:fedoraproject:fedora:25, p-cpe:/a:fedoraproject:fedora:firewalld

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 9/3/2016

Vulnerability Publication Date: 4/19/2017

Reference Information

CVE: CVE-2016-5410