CVE:CVE-2016-5410
CNNVD:CNNVD-201608-308
firewalld是一套提供了支持网络/防火墙区域(zone)定义网络链接以及接口安全等级的动态防火墙管理工具。
firewalld 0.4.3.3之前的版本中的firewalld.py文件存在安全漏洞。本地攻击者可借助多种方法利用该漏洞绕过身份验证，更改防火墙配置（多种方法包括：(1) addPassthrough、(2) removePassthrough、(3) addEntry、(4) removeEntry或(5) setEntries D-Bus API）。
solution:Upgrade firewalld firewalld to a higher version than 0.4.3.2,and avoid the version (,0.4.3.2]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0