CVE-2016-7545

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox...

8.8 HighFix available

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.38%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: CVE-2016-7545
CVSS 3.0: 8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-284
Updated: 2026-11-02

CVE List No score

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: CVE-2016-7545
Updated: 2026-11-02

EUVDEUVD-2016-8398 No score

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: EUVD-2016-8398
Updated: 2026-11-03

GitHub AdvisoriesGHSA-38gv-g72v-rp63 8.8

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox...

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: GHSA-38gv-g72v-rp63
CVSS 3.0: 8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-284
Updated: 2026-11-02

OSV 8.8

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: CVE-2016-7545
CVSS 3.0: 8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-7545 8.8

SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.

Record: DEBIAN-CVE-2016-7545
CVSS 3.0: 8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Show 8 moreShow less

OSVRHSA-2016:2702 8.6

Red Hat Security Advisory: policycoreutils security update

Record: RHSA-2016:2702
CVSS 3.0: 8.6 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0535 8.6

Red Hat Security Advisory: policycoreutils security update

Record: RHSA-2017:0535
CVSS 3.0: 8.6 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:0536 8.6

Red Hat Security Advisory: policycoreutils security update

Record: RHSA-2017:0536
CVSS 3.0: 8.6 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10759-1 No score

firejail-0.9.66-1.2 on GA media

These are all security issues fixed in the firejail-0.9.66-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10759-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11179-1 No score

policycoreutils-3.2-1.4 on GA media

These are all security issues fixed in the policycoreutils-3.2-1.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11179-1
Updated: 2026-11-02

OSVSUSE-SU-2017:0338-1 No score

Security update for policycoreutils

This update for policycoreutils fixes the following issues:

CVE-2016-7545: nonpriv session can escape to parent [bsc#1000998]

Record: SUSE-SU-2017:0338-1
Updated: 2026-11-02

OSVSUSE-SU-2017:0339-1 No score

Security update for policycoreutils

This update for policycoreutils fixes the following issues:

CVE-2016-7545: nonpriv session can escape to parent [bsc#1000998]

Record: SUSE-SU-2017:0339-1
Updated: 2026-11-02

OSVSUSE-SU-2017:0340-1 No score

Security update for policycoreutils

This update for policycoreutils fixes the following issues:

CVE-2016-7545: nonpriv session can escape to parent [bsc#1000998]

Record: SUSE-SU-2017:0340-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`policycoreutils` Debian:12	before 2.5-3	2.5-3
`policycoreutils` Debian:13	before 2.5-3	2.5-3
`policycoreutils` Debian:14	before 2.5-3	2.5-3
`policycoreutils` Debian:7	before 2.1.10-9+deb7u1, plus listed versions 2.1.10-9	2.1.10-9+deb7u1
`policycoreutils` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-gui` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-newrole` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-python` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-sandbox` Red Hat:enterprise_linux:6::client	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8

Show 91 moreShow less

Affected packages
Package	Affected	Fixed
`policycoreutils` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-newrole` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-python` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-gui` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-sandbox` Red Hat:enterprise_linux:6::computenode	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-gui` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-newrole` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-python` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-sandbox` Red Hat:enterprise_linux:6::server	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-gui` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-newrole` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-python` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils-sandbox` Red Hat:enterprise_linux:6::workstation	before 0:2.0.83-30.1.el6_8	0:2.0.83-30.1.el6_8
`policycoreutils` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-devel` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-gui` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-newrole` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-python` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-sandbox` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-restorecond` Red Hat:enterprise_linux:7::client	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-newrole` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-python` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-devel` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-gui` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-restorecond` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-sandbox` Red Hat:enterprise_linux:7::computenode	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-debuginfo` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-devel` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-gui` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-newrole` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-python` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-sandbox` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-restorecond` Red Hat:enterprise_linux:7::server	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-devel` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-gui` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-newrole` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-python` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-sandbox` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils-restorecond` Red Hat:enterprise_linux:7::workstation	before 0:2.5-9.el7	0:2.5-9.el7
`policycoreutils` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-debuginfo` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-newrole` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-python` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-devel` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-gui` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-restorecond` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-sandbox` Red Hat:rhel_eus:7.2::computenode	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-debuginfo` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-devel` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-gui` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-newrole` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-python` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-sandbox` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils-restorecond` Red Hat:rhel_eus:7.2::server	before 0:2.2.5-21.el7_2	0:2.2.5-21.el7_2
`policycoreutils` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-debuginfo` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-newrole` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-python` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-devel` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-gui` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-restorecond` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils-sandbox` Red Hat:rhel_eus:7.1::computenode	before 0:2.2.5-16.el7_1	0:2.2.5-16.el7_1
`policycoreutils` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-debuginfo` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-devel` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-gui` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-newrole` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-python` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-sandbox` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils-restorecond` Red Hat:rhel_eus:7.1::server	before 0:2.2.5-16.ael7b_1	0:2.2.5-16.ael7b_1
`policycoreutils` SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2	before 2.5-6.1	2.5-6.1
`policycoreutils` SUSE:Linux Enterprise Server 12 SP2	before 2.5-6.1	2.5-6.1
`policycoreutils` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 2.5-6.1	2.5-6.1
`policycoreutils` SUSE:Linux Enterprise Server 11 SP4	before 2.0.79-4.8.1	2.0.79-4.8.1
`policycoreutils` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 2.0.79-4.8.1	2.0.79-4.8.1
`policycoreutils` SUSE:Linux Enterprise Server 12 SP1	before 2.3-3.3.1	2.3-3.3.1
`policycoreutils` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 2.3-3.3.1	2.3-3.3.1
`firejail` openSUSE:Tumbleweed	before 0.9.66-1.2	0.9.66-1.2
`coreutils` openSUSE:Tumbleweed	before 3.2-1.4	3.2-1.4

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-7545 is a high vulnerability (CVSS 8.8) in Selinux Project Selinux, published September 25, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in policycoreutils 2.5-3.

References

Show 29 moreShow less